p6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xbf00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  918.810560][T29985] bond24: (slave veth109): Enslaving as an active interface with an up link
19:31:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x2, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  918.874707][T29976] device bond24 entered promiscuous mode
[  918.882722][T29976] device veth109 entered promiscuous mode
[  918.918315][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  918.964423][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:22 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x2, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x3f00, 0x0, 0xffffffffffffffac)

19:31:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0x4)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[r5], 0x1, 0x0, 0x1}, 0x0)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc000}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  919.132080][T30060] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x8, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x4510, 0x0, 0xffffffffffffffac)

[  919.285362][T30075] bond25: (slave veth111): making interface the new active one
[  919.307317][T30075] bond25: (slave veth111): Enslaving as an active interface with an up link
[  919.325387][T30060] device bond25 entered promiscuous mode
[  919.332005][T30060] device veth111 entered promiscuous mode
19:31:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc100}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:22 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r4, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x3f00, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x10450000, 0x0, 0xffffffffffffffac)

[  919.519109][T30144] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc200}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  919.674122][T30147] bond26: (slave veth113): making interface the new active one
[  919.697002][T30147] bond26: (slave veth113): Enslaving as an active interface with an up link
19:31:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0xff07, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  919.730940][T30164] device bond26 entered promiscuous mode
[  919.736622][T30164] device veth113 entered promiscuous mode
19:31:22 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f0000000100)=@ipx, &(0x7f0000000040)=0x80)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x3f000000, 0x0, 0xffffffffffffffac)

19:31:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc300}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:22 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:23 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0xb0bf}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
r4 = fcntl$getown(r3, 0x9)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000040)={0x1f})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x80000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:23 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x1045000000000000, 0x0, 0xffffffffffffffac)

[  920.014718][T30235] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc400}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc500}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:23 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:23 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x3f00000000000000, 0x0, 0xffffffffffffffac)

19:31:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x1000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  920.195606][T30245] bond27: (slave veth115): making interface the new active one
[  920.225905][T30245] bond27: (slave veth115): Enslaving as an active interface with an up link
19:31:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000ffff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  920.250343][T30265] device bond27 entered promiscuous mode
[  920.285932][T30265] device veth115 entered promiscuous mode
19:31:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc600}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:23 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:23 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000000040)={@default, @null})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x200)
ioctl$SNDRV_PCM_IOCTL_XRUN(r6, 0x4148, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000ffff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x2000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc700}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  920.485835][T30332] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:23 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  920.577928][T30332] device bond28 entered promiscuous mode
19:31:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000ffff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  920.674194][T30378] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc800}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x3f000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  920.770039][T30385] device bond29 entered promiscuous mode
19:31:23 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:23 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xc900}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0xff070000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  920.946975][T30430] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000ffff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  921.066037][T30438] device bond30 entered promiscuous mode
19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xca00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x8000000000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:24 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000088a8", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xcb00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x200000000000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000f0", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xcc00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:24 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x200000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r2)
io_uring_setup(0x1, &(0x7f0000000040))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r4)
r5 = io_uring_setup(0x1, &(0x7f0000000040))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r8, &(0x7f0000000100)={0x8a81, 0x6, 0x18}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000040))
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x3f00000000000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000007fff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xcd00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
r6 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r6, 0x3, 0x0, 0x100007dff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r7)
r8 = io_uring_setup(0x1, &(0x7f0000000040))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index, 0xe5, &(0x7f0000000100)=[{&(0x7f00000002c0)="a6ceec6de6d64535c8e247fc96e989ebc50914c4252c0be52e0b4d1f79514bcb8ae151d766c19092434dfc72b25ba43fa340da435ea0578f079e3d169ce5350d3a2527d6ae682adf2cd7daf501d8ad27452e551acf98b9c233e2", 0x5a}, {&(0x7f0000000340)="59af4dd6f0f2c7dfb92eda14d1db6ee2c274bda414d5f14f00701af6cd4c6941436ac2270307aefcc03169ea1a67d57452b9d73da77145e1ae42f936dfca0b2340725e901a7fa97cdae3a04d933b6f842523cc895e1b3becf47dfc328c95eab35f8d4df1b9f7a1832096c5bbc7feabce541466b56d925280345726a8", 0x7c}], 0x2, 0x0, 0x1, {0x6, r9}}, 0x1ff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000500)={'veth1_to_batadv\x00', @ifru_hwaddr=@broadcast})
r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x48000)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:24 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400142, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000002c0)=""/4096, &(0x7f0000000040)=0x1000)
fchdir(0xffffffffffffffff)

19:31:24 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xce00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0xff07000000000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  921.777528][T30534] __nla_validate_parse: 12 callbacks suppressed
[  921.777538][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:24 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:24 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000009eff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:25 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x10000, 0x80400)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000001c0)={0x29, 0x6, 0x0, {0x2, 0x2}}, 0x29)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
recvfrom$rose(r5, &(0x7f0000000040)=""/60, 0x3c, 0x2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default]}, 0x40)

19:31:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xcf00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x7fffffffffffffff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  922.030032][T30590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0x80000000)
syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000100))
r6 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0800400000000000cd616417b2e9286b911281c20eb983842fe9e01246908809be33159b25417cd1d91dd8b22cf0dc3edaf3969a984be7ad5f9b00b3aa25cbac099c774f2f4b8e00bbb20d99f06f03264e673333908855ef34b51e9282854181049dbb1e8e536eb3cff32e191ceb3b0da61e25c27be0c59f0da0518368b02cb9171b94e2b3e586911088e07dab9209ac25"], 0x24}}, 0x0)
r8 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r9 = socket(0x11, 0x2, 0x0)
bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027d8ce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf250700000014000400766c616e3000"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0x0)

19:31:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000f0ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x8, 0x0, 0x400000041c1, 0x814, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000}, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
keyctl$clear(0x7, r1)
keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0xfffffffffffffffc, 0x1)

19:31:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd000}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:25 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0xbf, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  922.287580][T30623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:25 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={r7, 0x1, 0x20, 0xa95, 0x800}, &(0x7f0000000100)=0x18)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd100}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  922.340496][T30630] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000fcff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  922.415510][T30633] bond31: (slave veth117): making interface the new active one
[  922.424065][T30633] bond31: (slave veth117): Enslaving as an active interface with an up link
[  922.520168][T30680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @vbi={0x25}})
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:26 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd200}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:26 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000004)

[  923.008838][T30708] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  923.036967][T30708] bond32 (uninitialized): Released all slaves
[  923.054121][T30711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd300}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000ffff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  923.121829][T30714] bond31: (slave veth119): Enslaving as a backup interface with an up link
19:31:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KDSKBLED(r2, 0x4b65, 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:26 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  923.261108][T30729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd400}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffdffffffffff, 0xf91}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:26 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x9, 0x1, &(0x7f00000001c0)="4fd5b91075a7cf57cf03bdb2a15a4fe5916b33156088ad1d83502d8a584dabfd7a4a4aedd2eabcd186ad0c675a42f20b301fb4249afd72de486225404fd0e61e39", 0xff, 0x0, 0x1, {0x3, r5}}, 0xfffffffd)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept4$vsock_stream(r7, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000002c0)=""/155, 0x23000, 0x1800, 0x1ff, 0x1}, 0x20)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  923.392034][T30737] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd500}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  923.432954][T30737] bond32 (uninitialized): Released all slaves
[  923.465604][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  923.539845][T30751] bond31: (slave veth121): Enslaving as a backup interface with an up link
19:31:26 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000040)={0x81, 'syz1\x00'})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:26 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd600}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  923.737319][T30778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:26 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x111, 0x4}}, 0x20)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x3, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
recvfrom$ax25(r4, &(0x7f0000000240)=""/248, 0xf8, 0x80, &(0x7f0000000340)={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

19:31:26 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r3, r4, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r1], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6)
keyctl$clear(0x7, r6)
keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000040)='rxrpc\x00', 0x0)
r7 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r7, 0x3, 0x0, 0x100007dff)
ioctl(r7, 0x7, &(0x7f00000002c0)="c84754aa39823276519738f486a2716adefd4e1a44b44615517522279a4bdbf2950474d6252ebdc64dac726de379bbeaffaf1608061c31ec4a7a3ad94c8b48d287423644d85258b9f3823d188a7e94bba1ac676de39d7b59be966404de3b7bfeb221dcae51f47ec9b5c82ba5882d46dd83c4a54777558e3f6175a496e2324f99c25ed57cb316202c1bc4e99d15f7d23d537a6a000d036e1395d20209b9bdbbd8c2")

19:31:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  923.802565][T30785] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd700}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd800}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xd900}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xda00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffeaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x36020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  924.239113][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  924.278189][T30858] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  924.461318][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xdb00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0xad7}, 0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept4$vsock_stream(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000100)={<r8=>0x0, 0x100, 0x10}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r8, 0x8c}, &(0x7f0000000280)=0xc)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  924.609140][T30909] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xdc00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:28 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000040)=""/132, 0x84}, {&(0x7f0000001240)=""/164, 0xa4}], 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

19:31:28 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:28 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x72, 0x8, 0x8, 0x2}, 0x6)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000c000100736b627072696f000800020010000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'veth1_to_hsr\x00', <r7=>r6})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x26c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008004)
r8 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f00000002c0)=""/148, &(0x7f0000000100)=0x94)
r9 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86)

19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xdd00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  925.007042][T30969] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  925.087076][T30969] bond35 (uninitialized): Released all slaves
19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xde00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  925.134420][T30977] bond31: (slave veth129): Enslaving as a backup interface with an up link
19:31:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:28 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xdf00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:28 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe000}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  925.443008][T31004] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  925.481139][T31004] bond35 (uninitialized): Released all slaves
19:31:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ftruncate(r0, 0x1)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100007dff)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x400]}, 0x8, 0x80000)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0))
ioctl$CHAR_RAW_ROTATIONAL(r1, 0x127e, &(0x7f0000000100))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040))
r4 = semget$private(0x0, 0x8, 0x0)
semop(r4, &(0x7f0000000080)=[{0x2}, {0x0, 0xffff}], 0x2)
semctl$GETNCNT(r4, 0x2, 0xe, 0x0)
semctl$GETVAL(r4, 0x0, 0xc, &(0x7f0000000180)=""/114)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000140))

19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe100}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:28 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r4}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  925.585449][T31013] bond31: (slave veth131): Enslaving as a backup interface with an up link
19:31:28 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe200}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  925.791655][T31037] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  925.884187][T31037] bond35 (uninitialized): Released all slaves
19:31:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe300}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  925.965095][T31038] bond31: (slave veth133): Enslaving as a backup interface with an up link
19:31:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0xffff, 0x1, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990af7, 0x7, [], @p_u32=&(0x7f0000000100)=0x8}})
syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x8, 0x81810, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x2000000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$RTC_ALM_READ(r8, 0x80247008, &(0x7f0000000040))
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
io_uring_enter(r6, 0x63e0, 0x6, 0x2, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000200)={0x100, 0xf77, 0x8, 0x800}, 0x8)

19:31:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:29 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe400}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000040)={0x1000, 'syz0\x00'})
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000))

19:31:29 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe500}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000380))
mmap$dsp(&(0x7f0000ee6000/0x2000)=nil, 0x2000, 0x0, 0x30, r3, 0x0)
r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10100, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x1b5e, @dev={0xfe, 0x80, [], 0x2b}, 0x2}, 0x1c)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r8, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r8, @ANYBLOB="000229bd7000fbdbdf2502000000100007800c0003007f8b7930000000004c00058008000100757870001c00028008000200260000000800040000010000080002003f00000008000100756470f513000280080002005e3900000008000200040000000700010069620000100002800400040008000200050000003c00078008000200020000000c00040007000000000000000c000300ffffffff000000000c00030007000000000000000c0003800000000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r9 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r9, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe600}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7\xc9@\xa2\x12\xfe\xc7\xd8\xe1\xe8\xc7\x85\xd6c\\,\x00\x80\x00\x00(\xa0m\x87+x\x14i\x88\xcd\x89\x01$\x1d\\\xa2\xc4}%\x19\xcd\xaeR\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff1b6}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="495167292a16ee52ad86b92573bfbee168005cac9aff063fae6fe91b222335e364073fa975aee1df876f1408bbfa403c7c9c5fdc1f20824df02115aaf58264b1798fc4aff9f6c4a9ac37b07425"])
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r3=>0x0}, 0x0)
setresuid(0x0, r3, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x88}}, 0x4841)
close(r0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e20, @private=0xa010100}], 0x10)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8)
pipe(0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0)
ftruncate(r5, 0x200002)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)
fallocate(0xffffffffffffffff, 0x69, 0x0, 0x1ff)

19:31:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:29 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:29 executing program 4:
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x5, 0x800, 0x3, 0x0, 0x1, "c03f6b5514e09777"})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040454)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x6, 0x15, 0x8, "6b377f03898db197e8518801625914478bb35c4a4231435154f52ebd982df4f341fef96b6283b708952517967ee6a824a1763c185babbe761fbcebad3e41bbc1", "399f47ca33f71bfc6359db108dd7f503eb7430981e51abe45ae7ed7aa1984fdd7fb48d03937921db1b5c7f8b5367df525bd387d1f2c18fcf3df4bb8e82701a2b", "04a3141c9669c1f6dd8bdc3c1d8ee695455e2f586106017d05e389c893c98f0e", [0x2, 0x9]})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe700}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  926.962782][T31118] __nla_validate_parse: 10 callbacks suppressed
[  926.962791][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:30 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73322e00b12342a03bd928a26203cf924423bf9b7e2b97781e13de27e31d5e22ae2827bdb2df1b262588acd8ec6cccc104af69317e84701b46ad746bac87893fd3c22f605dc5b35057d93022f08de1229beb0a3be6938035c9a6a0c6009eaec893ee4301e72651544a8bbbe2b1d5c2a91ba2e66f2fee4dd868ba6a7e4b88ab33ad65a887bbb2b42d40"], &(0x7f00000002c0)=""/208, 0xd0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:30 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe800}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:30 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  927.149309][   T28] audit: type=1800 audit(1596828690.242:8): pid=31122 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16067 res=0 errno=0
19:31:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x80000000, 0x2, 0x2})

[  927.232847][T31148] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xe900}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  927.277839][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xea00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xeb00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:30 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ce\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000001ac0)={0x1dd, 0x9, &(0x7f00000016c0)="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"})
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
bind$rose(r4, &(0x7f0000001680)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x6, &(0x7f0000000100)=0x4)
syz_mount_image$nfs(&(0x7f0000000180)='nfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x6, &(0x7f0000001580)=[{&(0x7f0000000200)="e20da5be279ee21c6366297f14f58f4aa9de6e1ab4cd558203b5eb87", 0x1c, 0x400}, {&(0x7f00000002c0)="11e67678b2934527d3e8d46b99a94658a60f6eec13391cdd0550f36380889cbf8fef00175b1da3bd8a1df6c2f1d6d76e3b860836fea0402be64abdfaa2affc3b59af5f6a8f38cc969e25b2a40ee97e8043a5a11c6efe8a38c7f4e8dfd64dd2e882eb082655dbcf6d0d01e9dcb1f273d16f7a60f678d3903bf5399f581101818804730e13bcc85eeee96b121f1f329a4ddd4ad560c6e99455a143a7ccf4e9ea34346afe285293cbc06ebbcfcc5db248f5c6d8a2eb88f7e41d", 0xb8, 0x9}, {&(0x7f0000000380)="f28198f3a012ea92945f447691aa8fea42c343d2b6e83053a1acb24adcde58e9f0b2dacb527803597231ae481521d18199fec1024947bf88d6a2", 0x3a, 0x8000}, {&(0x7f00000003c0)="d0ad8dc68fa8a1ec80b396dfd73cf30e4bc3325f5d53c72e2e675e162dacd0b6eee511642ed744cf3ac10cb6f13da1bc1136000991f4a94f95d803c459339b23733ab8c7412ae3f9c4fd2f40eb388f726de946981335064620fda8d3b97b1eace1654c027ac46777e05bce19f390e706e9bcb925de8eb05cf0eb8ed534130c49a203587ba3227f18f83bd63d99f9a7175236f7da27819c1193cfd1ff4dc17366f7ad4c33b6565951add84b7959057ae1de6ad5da1c0a9331ea302a2365984da009c5db16d907b89306f642f94b70bc2839b98f55ec7abab099c11d65719b1786ecee58cfa08290f98bb29748d735795d0db8b8218a1425e5dc88d2f01f7fec00353249e56e516999b958e84d0badce364cd64f81d31ae492b68a2d5a68b927310857374dfdf16e565bcde5aff87e62af0de9f44739774660b14867cbdd8f20be207860801e8683f4f873471e7926891e2729253fa88af2273b5ce555f8fd1e06ea1f7c8bbfe61ddab1b9a6ee2c5f8b8c99f59f69df80155bda60e36ad98380e71d45d95de369aca61fe1c16643709a147fa1a399a7896d3d129bead378f3a80682e16fc470c5a74fb6a1b9507f9167148265acd76c7d4a423083251e62dcf183073445a548290c7c0e9b229df4d512ae9682996c51ce4158eb18f8c48150e3ca3cf582ee44d5e6cdd0b9f3b7b34fe5ece6b3d8ed2441c638c5809c817d0c9f78865f4b83e1f9cff4b1393b1ae6e5588fecbe292e02164d24f51f2322408d46c2d75ec1e215335f5b24601a179d2cfcf9e8f1888aeea9a4b8323926cfa0aa582d0286ec4dba6a268e76d21ae864db5122086738e856c0cc5d343e0da582f84659cbb4efb4e74a7772dbd13bbd91ec0b6ac91c7edadf87154b4110d0d39bfc167a72aa59ce41244f4f1ce717d4a77a40911e1e4f6a518db9427f22a61a99df930d4e3868e5c48b83313a42dcd60b086516f0c87982f9760cc74c5e7572cb9d3e487acf68279cd3f52b9dfe9d19ae49e2db3fc15a2434f986fc679c7157b1001fb5b1effd3c8fd1e63993c25591be2867360033d0a96fe1e7799da1b8417927b5dd9a32e68e447e92731011f9f687f8ed7ee25b3a688e742ab925db5ca1b334856254c8d40336bba9531b38186e92fcb57f7c66b4ad5cd0e4f81c41c68bb2b4b2e9e840c0290d7fa22f6bca82fe05190766e5baa77662df4f021749c3396750dc8655514ca63ac05a86b61c8b1853512e93301b35c3cfccdc2dfc082ca477b91d13c101697bcc4ddd701927bfc852fdab236366f192458784019883b2f564c839600a7e9e6df1d581b1b5c7411f4122fdbb367477116fb6b2bf8d2098d5d32a0e4f356c5339691751bd81f34da1d2572ad73e1a3947a7b12fcf8c8169769d2e310021191e3d8ee19fa5de2902b4c74b159f565588a5c5fc0ef9d57e96ce84672fe9176ff8406f16309d1b56f138d2e03b3843470a520c8ec0c3f7362f5bd2797bf5b2280082929af0385547795177c6e21be4ed3426d17713956b13fd9abf76c7f175fe55f883429db4b210f879db98a1999cc02ee56ad3b768b0074c000aa5928dc5313d886f31d4013c5263aa1fbfdfc9457e804fbc87e450a6d93ecba5991306f1f2fd4bf62e27008e171fc9d073b205054a8c5825700510aa40f76073aa2baeaa4fb4abfc6b15fbd4b36c16d1b5eb41c84267f42ebe33b6efc36cc317877cc97026295f5ce7288d90c9de2ac1de94d86cb34733c07f6393ce51c7e99de8d19c8197e87a6cf7014bb7a35610f1ddc04f1e708370cb47231fc885439c935b5964d7bf3a4c30492d493bb154a1d6e97d1fb191f2f2b77bdd7cfb90c9bdd51029b607ab6ea62602b95ec29450dda5b555bbb70d4d347b189758d4c69e2a52967b940ae229c3f7b8b1a758c1a4bbc326acc82545a8c4d96abc3a556b5172a090753ccc834f7263fd47c87aa9fdd4f8f82374e9ff99ccfd9aebf9dc98f317dea52234911a82b70a66daff89be48d1c85b188f6ca5a0591bdb27444154a3d17d835d9a46c67399d8c8a071da2d3efc7a7b10106852c6168b4b6e2d4498ecd367ae3c409314e8a1b48944e9d27adbc014461aade4a6e9f82b38142596bc6d55e3dff256d9d62f13809eef7dbb8e1a19e7490c350373292d01f0f999cf6999bbd92b3ecacdbcde75454df9d9e609a485bf911690d84ed1aa02e308bb6ad38728cce539b28c05ca5c0909395f7049329b1400e867d040f3165755d146e02b0bed0cd6b676d4d54adb151bbd7681d77b66766735d2e99387efbf06b28626ee8f2922f210c4371d8618da0907d79047a32452dcc9b883d6d55c0124c13effa905d04d74edd69de9822b66eed3414156ea6addc1c00621c540542e1efc461386580747904c8e8ec19e239cb98fda553ace7e6a1f1cf95b75abde6d90315078272d48a10c08d642a6db36485f4caa7fa8420b93477781bf1464a52899d9eac211468159284c0ca0e1f1e0275339a23cb5853ec995e4f7a0652f548386ae9abdb2ee8ec412f8b684b71f269917eccd4c3b806a70c46c060c34b10c337803e89c53ccbc0d3b5a87b601ae2d912b70998449fd480660bda565d4388bdb6c9c07b03733d083e69d69feb9ba5f0d59a189ea363cfccbcc26d4e658461623393b85fbc5730fc2cfcb0d9223e0b838ed4fed387a9066139f12c2552a103e94b8860368590579357b92d064f27dfc5ebb8383d34f87ab86a22fa4e3ea1efd44fd46a808df813c005955cbe84b88380de0c65408b7411b2ef45872d33686788e58f3e545a7ac6e0fdf5ce97caae80fdcb458abfa76fb2540c581f1d6dc73d8d03359294373bf20b0b57b089b41cb6f0c039962a90ae20fdc72b7b9b2403b0dbb4f977bf7df8703c126302bbd13fe071d24f789c7fbaf6809d52360094bceaa7208443066390fe818ad04001bf5d666957762d5637813e10328e93e2da0fad965a6500755f29ee027f9b6977c95e7b929cbe95795cb511a19901ba1dd28e7bc5006f371f383f115270996f491c4cd8b631c12228e9f4a32a0d95fa35b63cde29b41a9bac1bfa25c4c4c519ec71f861948cd17f64d9af51a791de263115708d451300163afde3c94823c18047a2ec634180173c87f8346f7a3362b3e5f703a483ebf66ec4398e1640e3eb890905a4e61819530842de8cbff4bd898dfbf5207ea349df357550047489a2e9b1edb5807d9c6a4749a802ddd9ce171bc9dcedc95fa8d084aace902122a9f2900467b5064d8c74b29ecb5c55ef123de208ca069f16c974e7470b0f444507411ab6607e481160abfb2c4d8a845a22f902ec4157f9aff006f6224e6a9f96d09503489201e81212c9f498dbddb3068760cf156fdabea6b3fd865a70a8459152d1147a059fd4f81d43cd43fad73ee62da940fa32943d100046604ae755b5c576efa6016a50a905f0e0cda2e03bf08a9bd0af2b77200ab6186e4d5c82d806a79001787e11dcbb6162df3b9eb99ebdb0760a811ff5cc044e96d53876e8df39308c66f43bd623f2973368ead9f67d4fff40420000dbaa099e319089998de3261007adea9fcd23c4e65a5b721c6a7dcabcdebcad37f08fa564bd70d4c7d7a0169def6373da5e85715a2da535d52642b1d401ef79cd47c01c9f231bb306e9362346dd17fc79c378978ce20f0fa6fe7ab1a8516f50382427abc524963e9f63798c9f558aa98ca05e0eea60399d20b2fc9b9d6dfc10ae7ca5c2c3d71c41a406d44def18fa737af6afcb2078f37622ca3b9ec63ea507250eb27a8c189186c3b79bc5b060fdf952b98ffa96778663b6826893d5f7f57398db69fe3f6055e133020a19f30a374a26e4d5ab9d42c703c6b947e9a84091cb8640a0488061d2064ac6f8b010311f79da3c42a4ca7067f75150ed72533e126139f213022c4b4df486e5f09304b4056bfc72d41b9e1b031fee633d44cdb1e5d42ba53db11a095a71ad0a5e3712d0a04ce4eadcf2e6f4d4bd6cc00c0f80d1521769d16229f5362413fa0eb458f2c7ed7872c2fcb624a87613f5e575f627f46695e87ef3e73ad6b13484f6f2ef4b4b3b113dfda495483f6befe69231435ab67144866a79bdb7caf4d46bb0d41f358ffe00885372e34f3889bb1cf06cb3601d0af34d8185c684a5604a71321e70a607595b67a346d3db2813cdd45e3be5f8b963ea3aaaa33ffa9d7da8a221220f647afb4e159ac37c110954eecd00b500a163c94cb9f1937c6f9ad921747efee94c89651bc116259855c43f26012205deddb98209ac6e6952a500e0b2eeb716a2f942e423cb9a9b18f30d08f0e4b2d68b3ee56330d32c8d8a340c586fa2c679d4d4df2a53f5f860af13f944f92b4bc81ebd1d61b042b0ff2b89bc3d4ba63bf94c9bf7d59dfd8dc3f96d6e20fe0a674ea39934d7ee542cdc8ae7c5321fa1e90b860dd5eef6631c43ea418648ddaef2c1afcdf7e87311cd931952c91433c786a8df32be2a5ba30bdbc3eb5cf0ca0aae72b8112509cb58487002065aeb90945323a380781984c6b61912a883a50738fbe3b6c20567918f8f5f1bf87166a3214ddadb4b8362f09a98b99da0243a9e6baebcbf6d609b99babb6d87433d4af8f5915ea4299be7444359bcc3f56310fbeba00dc517e1809a1a8380a1b0f75b02ddace7c64fdbb2d4c33c690fda3b64a735575aecaaeec68cff2588da8958fe4bf2eedcd985762f8a25b8c82add0b002f28eab02215769aa0a49640e110e60f8fb0240bd85fdc973bfc8565b9abe1b39eac93be5c8abe590f80009ff034ab62b7d40b0a5357ae90c46128387a95fae51082df2dd937e3aa0a9b90cd6de39bf7f5d80d39d4807e44dd5dfeb08a0e377670f3c39639b084c5942d0535d10a0f60fad8bf07757ffe9d8c8e450ea4ba8c7ee1761a494ba7f71df1f3ba9d53e969c82a0e3beb3f020d26a58f3424a74b64614d4562913591ccd7e96b0446615894f8965f4fbdf23f6b7113fd2daeaccfdce857f96244bec1249f24c5d920316955ad922e0a20a3dc614cf83d61576bd9c4b52f611992e07fb3c5ed8f666c539d47e416c85756bf67a62cdc17b2a1a9d3ee47bb5cb7ef8e3d4eb2d97bc92537c5a62c849e27d3fcab7a825bb6ca3e96b5401c10b1c5f2e991d1e6439a55e80aca8ca49245b336a79f6ed2249a2b29830d4dac476aba864948baef73e0feb27c76fe6a87e6fca3f2a86237aff30c4fd15728952331a02bf6f1e22e879e5d1a4a363b731caced1022318622c311e0fe933f2b0d7b622752a0aa57ece1a96acff669fc9c10ca81a0471186ed711e3794eeda3237772cdfdba936ea803873224d87606fa828d3fe41c3e3cc187ae546c831be596f0344c1f7df274926c96c6d3fa507ab6d8cab2d05d536daa955daeeebc8c51e6ce68e11c0e2b933f2cc879c7d5fed3077e66d3be4de63d2a4508649040c87d7e64fb58506c42ff34fd7977549f4d72ed74d5cab6c091a14830633288d2a9ad6a21824abecfbee2c04acdf476bef9e1052e9cd998c32b554b6a9700355b2463f23d9e9a0afe19655ebc15a2305a2ec0b899f2647840bbf6845053cb9198f77871d8372971ec9794302dc4633ed50c766b855473d887bc3991e2b0cf416b63be9da1fa06b399ae09a95b2c3a1e1234ea1d2e1867c8aba4f4b1c5e19e1d555f14f1d1eeff86ae82acb918911db95888ad2281f7456b46c177bc7ee2723ac5bbed6d09bfc6a37f258b95035702b27c2412f5437c25c3777ddc4c5b50e6b01fa31769ce396f468bdcc44dc9d107832d5328d487b126950c2ffdfd981f0b", 0x1000, 0x3ff}, {&(0x7f00000013c0)="186ab3bcc1f64ccaa6ca1806e358f7387463f91073d05362219d1cf86d0af916a2d3da94958df5369f6703868d012555fb96d2b24420e36a335b4533fb4035079fbe67b42460fec66f30a2a45fc2140500787c33203840bdce98133b6e65715c5c15a7241b0ce51e0df35940bbbab4693ba43fbaeb9a674daa2a0d3876a1b4a172a5da9dcb870e50ed142d08c2fd2e712d8f9b2bf3fddfd34ee70eae94d9c0cc5c3753ecf0d4ccc5e5c445bd6f41b93fb134a626b948551bcfcb1100569bfa04da64e45f3563b417de29731f38d890c9c69887b7c62267ece66fd4eaac66f24fce1cfbab66f1fd", 0xe7, 0xa8e}, {&(0x7f00000014c0)="4b9b5ead4b5571d077a04654afe1287bd70185ca44e3394286c7761bb9ac25542b3a6b1562d0e68c60083b3078742ae8f565a63aa44eb29c54f4c31fdb5769107d70f1447bb2c2f04ed1ef6f1d34808ed6ff7bbee8b8680763c49acffe82eedde9adbc88f13e8eecae06a0b7138048ffad79ac988ddf0b40868710381b32eefe5ed8874e95b7c7bb5d7ac3067984281e658a88e01026478b2f3cd4503978cdc7f04435cb", 0xa4, 0x7ff}], 0x0, &(0x7f0000001640)='\'(]*}-\x00')
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:30 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:30 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xec00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:30 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  927.605799][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:30 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  927.654113][T31201] nfs: Unknown parameter ''(]*}-'
19:31:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x3, 0xd2, 0x58, 0x3ff, 0x1, "caf291e54e93747d"})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="100006000000000020"], 0x34, 0x0)
getresgid(&(0x7f0000000080), &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100))
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x3}, [{0x2, 0x4, 0xee00}, {0x2, 0x4, r2}], {0x4, 0x7}, [{0x8, 0x0, r6}, {0x8, 0x3, r7}], {0x10, 0x7}, {0x20, 0x2}}, 0x44, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0xf09, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe31}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  927.762173][T31204] nfs: Unknown parameter ''(]*}-'
19:31:30 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0xdd29, 0x0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000140)={0x0, 0x1000, 0xffffffc6, [], &(0x7f0000000100)=0x8})
ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000040))

19:31:31 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = pidfd_getfd(r2, r0, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x4004010)

[  927.919026][T31230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xed00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  927.963170][T31232] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  928.052338][T31232] device bond36 entered promiscuous mode
19:31:31 executing program 2:
socket$inet(0x10, 0x2, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xee00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x6)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000240)={0x200, 0xffff, 0x0, 0x5, 0x1, 0x9, 0x5}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x24, r8, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  928.253848][T31282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  928.322304][T31286] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xef00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  928.454644][T31286] device bond37 entered promiscuous mode
19:31:31 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200802, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x80100, 0x0)
setsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f00000002c0)="a91f3bb2f81fa8d7893aefcef5735f67cb2ff4329bc48aebd1e733d73874686fba8952f13cfa62b8db0d0eb7cc2a517d3954533066d056a28446cb12c7de370cf80aa4bd2a349f13078d9d3fe172ededaa91a839f1c9051a4cdeaaa6ce30f1c6bb0d9aa00d9c25928481db890cc3fe1d93e924705bcba3288e8d3e1b478ab85dba70862661338cdee65d9d7e353d71709764bf9befc9f48745aad3482f499fc0505acffe5708c6d562867fa162f2e5a6bcbc9fb08023e4ac5c1b3a37db344f6c49d47729f0c6f8f7f351f2ecd9006b1496160069182a9993615a89c6f8", 0xdd)
bind$isdn(r2, &(0x7f0000000100)={0x22, 0xff, 0x8, 0x9, 0x1}, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x9, 0x501)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x5)
ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000140)={0x3f, 0x1, 0xfffffffd})
r11 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCCBRK(r11, 0x5428)
io_uring_enter(r0, 0x4511, 0x0, 0x0, 0x0, 0x0)

[  928.523981][T31329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000000)=""/180, 0xb4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12<\xc7\x1f\x7f\xc9 \x9b\x0e\xe8S\xfb\xbd\xbc\xdd\xfb\xd5\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/\xff\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4', 0x7)
fallocate(r2, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf000}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:31 executing program 2:
socket$inet(0x10, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:31 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:31 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r4 = gettid()
tkill(r4, 0x1000000000016)
perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x9, 0x8, 0x9, 0xad, 0x0, 0x5, 0x800, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x2, 0x101, 0x4f73, 0x4, 0x9, 0xffffffff, 0x5a}, r4, 0xe, 0xffffffffffffffff, 0x5)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r3, r5, r0], 0x4}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r7)
mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,uname=#&,cache=none,access=client,privport,dont_measure,euid=', @ANYRESDEC=r7, @ANYBLOB="2c6673757569643d343537a03f3c39322d633738372d300930662d326130332d7fd5093993aa166c61366e343233652c004a8b15fa10ded7ac4348d261158b12402ac017207ea155acb66992a2abde885f3afa34d32c98bdba6929a999c4d538875a95227277ad543ee8cb27ba667a7b1940a531a521a5da3a34e1efd1182bac4ccbefd8de1c5b8dbb55dfa17978215b9b3ebfe7ca1292697fc996fb6272124601e1c257e9d7ea949fd2336eb9"])
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
accept4$vsock_stream(r9, 0x0, 0x0, 0x0)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@private2, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8)
ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}})

19:31:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1)
keyctl$clear(0x7, r1)
keyctl$assume_authority(0x10, r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
sendmsg$SOCK_DESTROY(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x134, 0x15, 0x0, 0x70bd27, 0x25dfdbfc, {0x2a, 0x86}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "796d341757b1acd809ee866e909f17f5fe311b3f386c68be76341e33c2291ea9e38cde"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "b52f3fc23396911d959476b2e56cae9233e15a8ffed705d5f127669f5c4e630ea679b9e180470a1ad851b1b25ed4d95a2d91c6d650e74938383598d3644d9fa58b799afd02268e025180058c93508e221ad09b4ba0ad4ed19347260b46d3d8a279ed2232b60ef0b1cfeba681e7c2b782b6ef"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "a9383420c1bef6dc4a0b14f5be367b5b730a6085f927234be0f94379eb7bd738ce31da12a28ccbb7e45d217eed747d2a2fa0826e5263f2"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "c0a8af9985e46190dcb5e19e5246fb48"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "727ec5297bd5986e0aa955e1fe130be98f1b0a42f3278a01d3333c4a2c0db0187d09671b568e52c17a93ca"}]}, 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
fallocate(r4, 0xc, 0x7, 0x9)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf100}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  928.769613][T31349] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  928.882104][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf200}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  929.013004][T31353] bond38: (slave veth135): making interface the new active one
19:31:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0x4, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x90a})

[  929.063219][T31353] bond38: (slave veth135): Enslaving as an active interface with an up link
[  929.096576][T31349] device bond38 entered promiscuous mode
[  929.102353][T31349] device veth135 entered promiscuous mode
19:31:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf300}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  929.153006][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:32 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:32 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:32 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @local}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000140)={0x7fff, @local})
writev(r4, &(0x7f0000001680)=[{&(0x7f0000000240)="ad6d313b302768eccef176bb3b710a5f3c19d3912c792964f14992b92c5c65ff14be7cb379d54fc5424fa6d66db01ae17093f0f2f0b72e7b64d168b2b727e4282d223681cdb1c4221ed689496be29aa14a99e64ec2871d643c86ab94bb13953648806d6d550ace5ee655ae82212e6e8a15493b1975b37acdaf4d0bf2769f365272cd5345093af97a4f38be5f265a6920f35b3b23786be5420d5a4774ec24a4319cf7c6596bab412e", 0xa8}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000100)="dde6bc19af17457d418c93aeb3", 0xd}, {&(0x7f0000000300)="fd22a8c2aceca61395f2cbab3ad2247db465751e1095899bf4eaba87f42af968c6e1cac750f68b293bd121de85c945be878e95448bbcb1996bd67e77eba34294836e24aee4a4f690603668577de8ef4cfc9c71f80739206a609d3bc47956abde35a2f25e2c0542ba0463419fcf7c2462a9eceb2415fd0257b18e6b87c6fd21412058ca5e96087dd3d24fc73e56cb6025584949b72daf4bf183dc198f497b3c27a3950ddb1a04c4db", 0xa8}, {&(0x7f0000001480)="91a49db5ae6fbbac963482fb8986d335d8de350eefd4129fe384e4d7d947242a213d8177a4f30a4000c3c704e2b41cd27cf2d6f383ca5b344be0fb581afc03811afc0a1fe2b0e077904f50b83363bae2f73b2b6c07e164ffe9a54de9a0ed143ac193b9ec95d96eeab076779382c297040fb497268f9072b6588f89bf822e051dd5ed3c450540ffa5f3a879b100c6af1b24657aa2dd6c43d9bb05429dda301c9420749c58ae2cd3eb45bcd29e75d8c62df2625627458de9a559563d163722c98733550e19231407d4a2138e974861464e5f8d14cdd6f6b1ae090b11f0f0d9669ac160", 0xe2}, {&(0x7f0000001580)="aba4b7dbdc2418852df6eacecd1b2432c469f8a5243d961475ee2b4fa184925a10c893372145a3e041d32c390afae39f5d6e92be8b352662c4fd785ad8fd5f42bc8a074d85592ffac214fa9f7e9a38406ea21debd33751a7568e51a8cb425cc0ac60a800cd9228c7b76f1a9496e5f9fc31f64ae56145e6613521680cc8eb799076aaef6406d7d9be14eb5c98e95f635b66ff40a5b35b43a3f1dcef10bae669ca2f2deeccf8390dd2f45594b8ba4db791f1536c490614854f83be0c53b9898780c4295c88d34abfdf", 0xc8}], 0x6)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
getpeername(r3, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80)
fallocate(r2, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf400}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  929.319909][T31416] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  929.373108][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf500}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  929.525507][T31446] bond39: (slave veth137): making interface the new active one
[  929.586184][T31446] bond39: (slave veth137): Enslaving as an active interface with an up link
[  929.619030][T31460] device bond39 entered promiscuous mode
[  929.651196][T31460] device veth137 entered promiscuous mode
19:31:34 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3f, 0x441)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000100)={0x3, [0x9, 0xffffffff00000001, 0x200]})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:34 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
rt_sigaction(0x1, &(0x7f0000000080)={&(0x7f0000000000)="f3f3262e3ccaf04529bca200000021a53e67f3426e66e70c26400f1c48070f1a550fc4e1f56cb759013a57c4c27d2200c441505f7800", 0x40000000, &(0x7f0000000040)="c4a1f976be0f00000042c200002e0f0d390f2972e664430fec1d00000020c40105d2de436dc4a1556b2c5bd26fbac4228d2b4f09"}, &(0x7f0000000140)={&(0x7f00000000c0)="c4a3657cd56583a685d7f78b0040e100c4a2fdaedb0fa7c0f343f6e0dcf82e0f62c90f0f9c9500000000bbc4220da8d9", 0x0, &(0x7f0000000100)="4299470f3804a3210000009d4430fbf30f1c8294000000f30faac40241de450b0f38cc9c854b3fc2880f661ac4e17a7e3b"}, 0x8, &(0x7f0000000240))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf600}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:34 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:34 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000002c0)="d5d63223803aa10a0e0012e12c1a2bd642f3500f3ea840375f0a4eb2f9944c36870c00b4444d3880aaa5423039d589302695809236def8801e5eb4f0b7ea16dfabdf04ac8224b93f9a5554e211f24654d32ce34a68f38b799623f2e5fb77452764e1fd04ca96b32e08ee7112c9957e889a59861f046e724f4e0861d1ac8ce3331a776ebfa7034bc58ed6ef407d10ef716c66e631e2987d43a32908220b5e5e942c886ff20d7a098407c73787a6cd64272b886eb39dba42b7a12880cc998551a4a37d", 0xc2, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000100)={r5, 0x1000, &(0x7f00000003c0)=""/4096})

[  931.827198][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf700}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="ff0380000b479b5b58c0b58f98a67460ebb4bcd6068cad5707736855180b70889a095433d8e8760715838d8dd95bd8c6d715e52dfcff8bb03e7f6a22c7890fecd41904c1ed90e94ed8094a429317bbb305eb442c0a3767c1344be859b4f77054dab453b578dd7075c69d5c3b9535af553de8c626e025a890c56692a5b0bb1ce1840e3ae3"], 0x88)

[  931.871321][T31477] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  931.911022][T31477] bond40 (uninitialized): Released all slaves
19:31:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:35 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='.\x00', 0x2, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  931.975636][T31494] bond31: (slave veth139): Enslaving as a backup interface with an up link
19:31:35 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf800}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  932.077408][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xf900}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:35 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10404}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4300000000020108000000000000adcbab9d4b1be2000000090800054000000009180003800600033184d3c3f8565571efe2ae4000020094000c00029905000100840000000e76071887d1e7f9bd0d7cdd33b166581e3e3d51e06d8362120ee6d543d389ee4688c117c8ead8d3c35eab8c418a2c271073c14f6ddf648a857777deb9fc50076ddd926948892ba6d4303687300cd11007883615b390b64cee25d8b280f6d05fc53a54cf080c51a0a306032b517ab3898ad3cd7e91bfe1388d4d965144a1fd0771ba79217cba4e418fc11acf15d080774dce5b85e9"], 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
setsockopt$inet6_dccp_int(r4, 0x21, 0x10, &(0x7f0000000100)=0x6, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TIOCNOTTY(r6, 0x5422)

19:31:35 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x37}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  932.304483][T31541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000100)=0x78)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x104006}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000c19e903922a7780126a56be6fe30a9ae0001080009b700000000000000050000010900010073797a310000000005000400000000003c00048008000840ff0b02c00800024000000088036c43400000000908cbdd6d9bf997a70dc24426bb1dfac10a17f232e0a8596876eb010040fffffffd08000540000001ff0800084000000002080005400000001f"], 0x64}, 0x1, 0x0, 0x0, 0x20008005}, 0x1000)
write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="c221d131b17905a33fd7bf580cc6847bb2692a31bf10e91d6abf5fae262414a57a9646e92c649cf44294721fd4db181d00000683b6e926d20282a1059a5be63ab1b5fecb62bb4ec01cac344842d8"], 0x8)
listen(r3, 0x3ff)
fallocate(r2, 0x3, 0x0, 0x100007dff)
ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000240))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  932.370239][T31542] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  932.409516][T31542] bond40 (uninitialized): Released all slaves
19:31:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xfa00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  932.472448][T31538] bond31: (slave veth141): Enslaving as a backup interface with an up link
[  932.502487][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:35 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:35 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x450d, 0x0, 0x0, 0x0, 0x0)

19:31:35 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xfb00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  932.704878][T31582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:35 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  932.785516][T31597] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  932.846996][T31597] bond40 (uninitialized): Released all slaves
19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xfc00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:36 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="7ab813911c28000227bd7008ffdbdf25010000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x48, r7, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ' \''}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x4048010)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e)
r8 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$proc_mixer(r8, &(0x7f0000000040)=[{'RADIO', @val={' \'', 'Synth', '\' '}}], 0x23)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:36 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open_tree(r4, &(0x7f0000000040)='./file0\x00', 0x3001)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r5, &(0x7f00000002c0)="1aa2aeffb0ecbce258b7323cadf2a369c0a9663390b895fdfdea74e2586ebd0b6182c864b9d41d61e130668382d2db90f5d4f48d3fd4b4743be1925e91efaf515fd499738289bc7f0af27a28731d6c43e31bf6377577f542edea9f96d9ad449518afb0249bf226c6aef1b427dac0482175e8906b111ed282d6f418b5b7b09a0fb044fb47833fa460b820c62ede19f5463d0f1f949abd9232532c6f74408b07897bf65050f30380a6651e4d59ac79b5ef83fcec805d831876e08a8c6992f415456cfadb933b36678d2eb8b3cef643d7e0519e0072486c1d1d6b8b981ed99939bec24eec82c2382e21bb13be73a9890d5acaf3730a5ec15524c0b2c3a3b5bc4a94f3e223ec8c2f8f0b5254b1df5ec70758c3ee91115f9fcdd9f35b97aaa2a01d2ac6510c30ce461a60ab46a2daa2a6b74fb13f646a61f132d4fdef544ae41b846e2bab41eb1538fca1ef78dc73be95e5cd206ab086aa88e07f4aa404fe25c7b8c719274e4c75255e2850034c5fba4b4275ed5754e15cbb6897235217a3a5d9b71a5f194543271e7fd2749cf9887b9ecc001ca10191d6d22da5fd6559e378fbae2066872be8c7d466d63e2bef4013d5f4505e0fb305a08f3d106487a855ea58ea9816e4eb0937c981a8d416193e07be00a18eefe4ca3d82daae68f564fbb50a02e18334240023cf7cb95cd1179802555bd637c09ee23cd0425547d1b066008e0c596149d82e177b077b8e90a33e1467ce042c3332f749aad695f49048730630196402abd4fce4849f6115dba028882a8abdfb418e50191de451d6221c8f9c98aff1d017704cd56a6342b61b2dd77884f941d4e7c43247ca664be294862b63c5fc0070cf696173666b39367de1b2f0c9317870805bde050a235b13c5e5a5ce7857a4f7b5bc0eb6791c49c78ad699768169adef54a78418db92bbb407fa8a782aef2cd5b614831a93513898778dcc00e43f923c5cbfa15fbd1654c0ddc1c8ed576b0cff0e334ff7c756ec0119ae831533795f81a64ffc280a4c589dedcbd0eea2cdb0e68a366709e2e392ce2f244214aa5040f0a3c9bebeb602d0e6cb4657240aded7cd871191e5bd77a774952a5ddfb57d8f554dc935b22ff1e7061af936332aad3bfe07c66e2db038054da85f3eb7dd106a03021e1c6901a10bedadfa7ac1c2e84d0be7c45088473f9f649596c518aaf379e44322cf0e2a8f24f47abfe293c319ec23f7d45062d6d6b89f9373e5f36b1ebfee01e0c900403f5e94ce2784530df3f8ca7db129241f6bcfa1b5a0884c86c709e45c1f1dffe84e1a391cd4bbb5faef94583040bcbc147d8133907bb9205ef81097853dbe0cfb129cdd9d76b394b8ac58b98ba934c6bee667580d3d7c1430cd586454f0900a5f5f7a3e18bc545ccd4ed979c6ea761ba8dcc1f59675476fbba2ea51e71b0d3a3687e0f827129d3dc3cbb7c71c8b9093248c40fbd50b592d185a3de7808db22123cddb2e1dea15b5ca4e9473415701ff34d8c6fe1f5801f533cc3b2ae3d204f1075fa1fbb1a41449b9be949f270342ece5bbfedd0445fdd01d99200daac90021ca9d877014fc9653250355c3bc72394a15a61db498b8d34a62c8451f56ee1dfb396ccb49e70779160ccf206bc3fdc54da0a2543a34f6b0aeddcbee3958cdca47087041f2bd443c21fb77982055a9f488632b053566f44d40ae3cc47c1d638787235f5f15babbde7e1c5e68e000e6b02578344919be4f667cc6311dd91469ae3fea19f92c3db20cf46bd4c50d2062a60a27a8260415b233d5c67a3e2d204a0251ad6390c8f021ed715fe878a1666b36a08c6f1f5886f413817d56081487bdeb4eaa794d1ebd9df9b19824594c1bd08479770fcef5dca0ff492e29cf3bc33e800c4b8c75b3caf046a3c3e4b2c6614bdbe6d49a2dd01ff4b8bf9afaaf3768e6c1f8eeb6a1c9235b6907aff466a81f3cafbe9972121c9b71dc4cd1b458a28df224693cfdac37aecfebfef79dc74de6c41bce333eb973a826be572676d2238ae067c6efac8f0235afb872972bd7d5fda9561286a8d5d788835de614755cdb4324b71f1887207ff4498711599a5fbb506dc55e5ddcfff289a0ae4a9cdc4d69c1c9e7f065d6c8174042a3736fbefb9a8a3e8eceaab9bbaecdc5ff92bc75b8222d3e618f5841e243d9d0672dc45bd36f6edd0716ce2e972143a9424b6a707ffdde247731b2284cbdce3989cc2ed61093bebb84a93412d15a5c3ab22a7ef188ae3cabdae3d8f24ee7b230fccc9808a29625395928e80c820c2811600246ae3699e26e85126eb49255e3bc327c8b52c1ccc2f97ae6852fb176d57c888161ecdce735d15dd28b75a12f06b126a69a65289afa8ef1594203fccc90afc41fca33c8aa1feab6232dd5396b17bd707816bb16fa26cccc4d82ed899447327fd50cb839819ffecb21b00e19e9d31fd682e96938194e7d6fcdc6363bb938c893ead99fbab6aa6e69feca2825e6f903b6bb19bd47106786178893b911fd0ef0f1813f5df854685586973fecab79f309e6fa0a54960ecb22c7c4bb5d7748372710156988d7f1d2f5642a752d4451dd22285ea9d2507fe48f49ef66fb410a0c34b54ffd4baf24fd6dfb6fc22d3e0f0d682f1efe43ffa810e3b5028cfff76399e505c247d636c3e0278b068b79d4722e1683bfeabe4f9c04190e12818e0d194af63eafd393664989ad472460d24d6f14cf2d21a6bb39f7b7b94ad5e2596a7ed005fa55cf6aa1ebd87a9b3ce5b7b6c6bdd75288047cf929f5fbd18abd5ba55960d07d0a72c5f27ee1e8c5bb0323b7acefb1392eca726058bd4ebc6494c22ab45baf6ba837420cc50b73e6acca726ee98823c68a87a0eda17bc63d9d3d849cce0db85add32ece0d2f0ce4d073422bc46acc66388ac1633f5fdbf680d3f14c334fc50f0fb6f6630d9328242df4bdbdd6c91bf396ab0c944285e9853c1067420cef18c6cc53af73c1249cb80aec62e13824db0a8240ef9e63a638c3ca5287ddc0cd40cfbeb93b7652ce772720e446e43d0330112ca1d1b45a4a0e83e5935229a181c7061ed2f69bc2ec07b4bc13acd4bdb53d3c26d85e32725050e567b36312caaa9c7f9ab122e6a75a2929d23c730411caeccd2935d7200c62531a2834868c4dfd71dd999363a15dc977b0e3f3f50b18916924d085c3492b4775bce4aeab59a8d2978339b1ba65a95291b2147d935f231658256060e5fdc0754fdcc29afc73efe984d4391be504b0d8c31e96a7277efb48b7d30709848e7079fbd1bcff5beb604782c9c6f40e598d2f3c9e1181b59fe9653d3d3da65a7807e56a14f08158794153425aa120a6b7fee97c8971dea2b5b1ad1a84786828207a49860541368d82c21723e31e882064e4f8fe9237c91d4f7cf15bb06053f29c5304eae372d6bbbb77bf844167c53f50c18990412b3877a74773b44cf0bc080e9a0be0a6bb1bd7cd858100823c0b935072492007d19a875403a12d8e5f8ef11d77a5958942a23be93da01b48f1a699436e1eeb0382efd1ddaf3f55adcc45886d619f5a68e8fcd4c6afb7f5442209cc37d1b62bf802e1d3824af5d5699d957549e114f74f003a143b3c23760d82670af4bb581ef39b2e1668dfcd6ebd5470db87941085dbba7c618d14f840888a2368ac7c8ef64781ff3ac6aa6b5b25b66e2a13d5621b02d75db460d5a46bf7b0a1c726d8bf23d4d1a7a83701d39fbb031b3f70cfab5d465d4a286f969d22b857a726355f872e6678835241ed9e7d6c7ddffb5fb4c0ff7f663905409f32005b6766c6f03f8b3908d82094927493a31aec746971e6bb0edc61828a8486604a7090902fc92326c3eb932e0d0fe2608b82d31baa06f6bb0cea6a697848115460ec478b0543dbeeccb66d998668fc7db147fad36af38d7c92c0a6d509836f66357480c2e14b597954067c95d1927bdcf42c1c803c3e8822ab93ab76049e2cd765602ac08c1ca41a3ec97b834e25f628f0af33699717571e62473821aa5466519af850c81229411bc179dfaf777a1e7e2d211e5d6c83f3f24beaf63d48d3a931fe84e760d3c37667142f807abcd7773dc9cc68969f979c188bf66fde2b982096a7c8c6e82fe05992b9e3fd74c913b85e6039c1dc2596bf4b58eb55c46ec299705834508c39787ef15f01012bc8feb5dc6f3e01c1eecee59990398a30a9d5e5c6fe444b832c686b533470bb14484c3190e4b2e8b8c0aa02b92c051210a0cf1716539a1b03708efff54d44a387a8e5497d14d1403a276848c6c24f8d29450e1880bf291d2a343c8d2dcdce092e8c50f713a3262088c17b573a201f12545357137c5f2027afd0be87b83a8d2e32da184f5a65b4ff1bddf3c23993816ba76c8bd61171e245dcacf5364211f52709ff5983bc0f674dd92583c89b74ba66b466173203b24f3aea854e4a1fea4edcc9bf83c97eab9c2a5cbab4e86da61469a4b5e90aed4b5c33638b5affbb0c27147636fb558f440c49926fc3f0ef6e74505ef1de1c08e6fa5d2a78a225b582eaea909b193de4960ea27a900eda8a04365eb58cae9311c42fdfd8e8b78e097e71e13277abb98571f16f7b03fc03b89991cad383eed954594c5a1efe1021311fa49874629e5d9472c17a0653354fff74b37db8d8481749d87c48073a56e381dfaa6011bbc9a1cb9bab9d76ac1af79c0a2f4093a302b1319443c65051f4a21b25b33d2f5445b79f0f323bd1a6d779949294e6967aeb6ca046ad4ff45fb9e29efff11af21068f997597cc5b0d02a61c912b8ca308d6ecfc930802a2f148f0d1c91f1403846e1e4263fdecf77291d70f5b385b4d167ec6b3eeed65ca6796ecf273721a7b7dabc11fb8c8eb5ca8ae26962023448ceda9d5cf087a4c46bcba0dfc2594e13d7d9104c4929f547c9be6c94619089182364445b3c797d7f764e0675feb984a11b9d03ec6cee2cc67f6074d01a0fde500cda9832615e48d99f6b5d8ecdac870683f73c4d498e1b188fb5ad6b8a2c7578f746fc0eb5d8d35da37ed2269ef075ef46b78e148677da3e26d62ff083cb69db09f79180901fd72eb9df176e3c0cb54398dfd4a3a5f47d0c96fa64adde2037d3edee7b6c1b391a35bc60a6ccc6e9461c9f8bb468718186e7775ca870b4de8d2a600038e9b8c066a6f9ed6d583f872be75681847272ff6118fbaa6bb92d2bb445a39f5a6e4356678ea025a0c5ab72d1b88ee9a746d0f3dde23aaa4ba862a8a2d91433a0cd93edd26b52cfb1348b57294e48186e595c57c57df9ff844c547cbff289ff1b140e8864dfdd07f88c8ea06d42d7a73db2f6c8a3da2a3b26742c1323295704a7f137b9119051da603fdc31145487083027866d97eb39535c3cfd320ce6086213352433eb459121db52ee750706040084e0a4b47b4dfda2596c2ad55f3b6bf54aafd8b657a326ee54396f05ac9c42b5b11702818f5232a5e2c007cdd798c787b9390ce25e9bfab72b95bd72b8bc368c4c1fdedca31088e1a096317a570ee4d7a30e30fdc98e11ce303a505f4eaed629a20485545ded4304e4f9526ed7bf8a5942c616b6b5b16ae04c86ded068d3a9e956f96d8592393577af4568405978337a56578d7e33c241e48cda9853c3a4e97d3d481700a3934b8d318a47342159cba6e82789ec81f49278fca0ee45bcf8396be34143ed57dc08fa88ee3004654ebab4126ca1cd254a5398fa4dbb4dbadaf40316a37db67eec2b4433c2321089e32f245520af2b31f3a6ea231e963b55d4cf18ae5c6f298bb4f40dc63ce3778d3a6a485bb16a2223f19bf4284815bf766ad87fd1b78e057cc7139bbe7", &(0x7f00000012c0)=""/4096}, 0x20)
io_uring_enter(r0, 0x404510, 0x0, 0x3, 0x0, 0x0)

[  932.952094][T31584] bond31: (slave veth143): Enslaving as a backup interface with an up link
[  933.005433][T31618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x5)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
socket$inet_dccp(0x2, 0x6, 0x0)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x84)
ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f0000000140)={0x8, 0x1b, &(0x7f0000000640)="1b91fa42f486bd383fecb27d6779808b94ac66f75923e4731730ece43b87ce39bd7227431ed8ce86ae4b4cc72c1bd61553277a25d40b5a0a1b9944e08949ab29cdc293ba1e2dcfb92dabb7b4b785cdfc4edba4853d4ff8cc981fab595c190342362ef2a75730529856ae6ab499b9d37cdedd78ef325b8f9f53830c19d009f59881bb1f12e849dc12eb502b1be84a3f668b406d798e5812b32b2fd42fec86eb0ee7c91d2f16aa4c4df766da", {0x80, 0x3, 0x20363059, 0x3, 0x0, 0x8, 0x5, 0x6}})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000580)={0x0, 0x3, 0x3, 0x401, 0x8a, 0x79c1, 0x9, 0x8001, 0x7, 0x1, 0x1f, 0x2})
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x154, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_CT={0xc0, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @remote}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x4}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x69}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x4e, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x20, 0x17, [0x56, 0xdfc, 0x8000, 0x178c, 0x3, 0xfffffc01, 0x0]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8011}, 0x4)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000700)={0x5, {{0xa, 0x4e22, 0x7, @private0, 0x30}}}, 0x88)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xfd00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:36 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0)
setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "c343fddf1dcb7050", "c68eacdc52c11fad603d6f19d058cd9594c64e7be66e14e0184b94f7a74167a0", "8f519f35", "925a0fed3b21f863"}, 0x38)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
fanotify_mark(r7, 0x4, 0x8, r9, &(0x7f00000001c0)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000040)={0x8, 0x3, 0x5b357895, 0x0, 0x0, 0x6})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003740)=ANY=[@ANYBLOB="248fa98cafbe8c719cfa00000024001d0f00000000000002000000000027a4bab166aaaf49a058fd95b3d745972c6afff1af4b29a2c2cbaf73f59f4013f197d641eadf15b055320f4ea1f3e5b37f455ee58552091220ad955ac38e04577271f6cb3e3585d08773ed6e06d312f817d14e422a583b58a1819adc9cde71914e6d74f066c2fa9daf84c13513fcdb02ee991a5e5adc4554b4cd8226d0adc0ef4348d751cf58ae329ca22be12b8c0d2b278bf41f", @ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x110c002}, 0xc, &(0x7f00000036c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e83300001300200026bd7000fddbdf250b0906024e224e221fe7f0457d0080040000000700"/56, @ANYRES32=0x0, @ANYBLOB="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"], 0x33e8}, 0x1, 0x0, 0x0, 0x24040000}, 0xc080)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:36 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$UHID_INPUT(r4, &(0x7f00000002c0)={0x8, {"c1f1ed21c06af924e9ef769189b415d6dba89ed32d02f43117e1b21c1aa189b085da94285a3c8334f3c18f3c0ed70ad417003b7ff92249d2a5f312de86ccd11dbe4ef21f9d1b7d8b50ed9beb1abed6f2dbe2f474c0b3e4f198a995b4cb2f55281a00d07db37453a4a959d4585ba44be2301023d25d8dcbdec73fce991bb4bf7e3fac79493b000f80175bf7776ddafaae72b58eeb7c3195ae969ec0f487ada5d61eda11aa942c662fd2f92659b32f2315ba7e5e46ef6644cb51769345bc971c7b653d96ee1f17828cd58ae268e74adc506f5270ed4626a8467c6d43e08a33f44762fcda355ace350933985c0d5a42fce0cec682eae5b9cbefe7abe0ae9970cdde2e65e99d404a98ac30859bb4428e0038bfbac7a41afb75e9c0cd07ae87704d8531257d52a49f6482ac8d1c27bfc163f73d2b78cb48b8c6ba4252f2dfcf91df7c95215a1ebb04601630338afca537b7b9daf989cdbcbbba500f75ea63349175c9ca43fce1a8f6ab031c8330231dd40cfe3427544189c9db884a5b36e5316ba2addf5227c587f080662554f18ec822d8b1819a43029fef3a03b19c4233a1ed7ad5fbaff7b718d07c4be6319428f8f43afa8df0728858b15397b3acb0a41947e287b5ab974a71c9dec758aed0a2b02a489cf82fc34bca7006a10c31dc26ce0dbcd53e2c5d71300882b89dcaad2305abebda8a2c29426eb4ccc1718fd88dc7b16d6e1143dfc1ae5747bec728d4b5d0fd1c4bb4942f5fe8d24e56beb7b9a73502a2bc8239235090f00a0617e57d59be00b990150b271e1cf630c01bd3475d3ccf566845a7db8aa0f838091003f257bc976ce99990a553edab456e483ace8828b7af78aac71a4937b6dfa33f850774174a685172691729e39c27c3e4cfa04ac5a68591d9c94fae7e0cfece49d99744bc3c40baad1bd220e7d1c226593832785b9a3f96ff74b9e11d1c7a8bf14c875df178df56b8ef23b86afdc115f47ce660574d1c55fa5e6e25fdac55fdf088040c4965291397d87ef4d73ca7a6072747eb5670a988497178fe4cd9f01efd04a94901c9bc2e8acd17daa3c5b618575ebe35d0ab810ab49bd6be6fd4e39eba98e98bbceac728ec6f89cf27f22298355a6d904dec7981894a834f766b5e23e1a11fa1f11252120ff3276a77393687745ac5088cb2481b8cf04182ec5100635877e1a19f39af242ec892c0436be71fb5f0b28cc889759a4e822de59e865776f4e3ef101728f06e33716c3545ad9fa07147338fe565cf9a76efbbbbc8471ed45001f6600c289dc2bc5194976645c641213cb867d59cb8d5db08398d2547e7f359e434d8af1253198f8841769cd86d8901dbb0bcef6742aa9ab4d1cbae1600dd9825a00335644b517d4e9ff7efd934a059276d3677eb120965bf9e06e457a2ccfaf9b50f0d2f212a228d7418ed86dda2ba3f374b377c9fb7dd818430aa20119d4aeb87b6290ba50ffa26242f6fc36c974b6b3c03d39e717dd383bafb9806ba7b4605fc1eba958971b04c954ebf7d0c6b55bdc8eeaeade7913e6c645873f9f1d451217dcbb3788dd248b632b036b91371f33005a8520da7c1680e8940178b2aae4889a6828ae4d4292f7ee115b8ecdd162dae8a2512b9e572a857c2fc2550b4b685efa1f28f9ef6e5a59d0ed8b2f80839a7975e33306391e26997db348f9f4ed745149475fe42865165815c27396ab6302e286c5c905f8bfee1aad2792d7c7cad0e084fc80657b8b414b1ddb568d6d9e5ad396f66a9baf5241acdfd1d04eda77e79f16b2a72b7a5c02437df86d7a77dfc042d7110aa4dc5209fdc6e92356711ceef429d28c317d357a70039ee2e6b35061a304cdf034561a06d694b21dbc5c15d1f50778568fcb109565277913740acc1a28ef1538e631dd3e3294ae127b09b0970fe07cab76bdb715f5646081e2a12493310574e763482416e1e74a2841a58cd09dcbcc1921a359331f1ddb1323a235f09b619f36f03665d74b3ce58811610beb84c4f7c3765cbf465d0c139365cd728114bf72ea4d7ba83d5e71ffb29b25b60b18839fe6cdf88bfaafb581ea077bf04c7f7a05cfe74dcd4d49266faae90e1aa131e38848580cebe6f4ddf1826cc1cedf54297352ed6f12ea4cf6da6fc86aa2ae6a3997c8f467cb275af656462cb2ec9bb325841c72b8c81c95ec505cebf9ad7e039062022fd6755a8e0530b6ba3f112aa9ffe8c9006c26d0b79cce8042f49ce2bbb3481434f96deef0d613bfa10651b848d86ee707b0517c8f4585ce9da0da7ba589efe82af8e40605841376805525549a7493e465623b8f3e387f1282fc85d34bac6805a1b447d68924ee466f0b1a33845df8f6004970917ebed76b8ecb66a6405d4d488f97517a90a018dd58d82657c803bfe291ef70a61ca2835332831284a8f16aaa632aa0239089755b43c244e91b6318c0b14a1f0ce343b70aacb26078d6d7a2a40d39d0b53b5a81ee78ba70e589e434b3d6af27715324a0568db83a2dd963427d324bb97ccb2a71f9e05c052c244d6c9df2029e64a51e3f503b1a273dd4fa857834d7cf2022586fe7084efc9ff4d959680aefc48007b5a8087e750ff1bfa6805e448bad61fe92e34bfde14f6079b21dd3b3873b0abec2b6528a28fdf0cf0b7f9a6163c2a4ea87b300367d712d42c68484c48d02d1dcfeb779f79d34197e6d00d551aaecab92dd2b55c5e36e28e8199cac5bbbbb1e6b4b42aa9274dd1f3afca488c110eee5b8f7d24b665ae59f955586337a6cc5940f4ec283e7097f264834af26904905660a8d3465f46716438a1dd8cdf29731821aeaa1b6f0d0a2d2b4e77c3a641a8d2e2ace66eabcd2a2fbea760ea2ea73112be210d2935f74a5f5ba71a7ab1095f5847d76b80613f0394edd4c5d9ff8ea7907eebaed1d2fa6671dbfb4243a967e0d4e2a270846cc3b6696b7eaca6cb5f2250846920348f512e03e738d21a164e6c6c95df93814ca4d54641b22f96dbd6775fa58c8f2bbb6908fa99a117b024b8eae95f11508d30566b4a1165317e243397068814ae49f09e3fb84bda4c8b46b39e790e70da561a908c7ee1957360131887b9448615d6e4a62c629dc202dc1a5c9aaabf48efaf3b0e43d25e7a9e3bc49128d6e3b4eb67ffc30c68b19754db12c6e72cb2822c542e90c5e099adc291498cbd8439e899fc7628a3a61eff2137a823a6dcab6f92100c21b142730aded8c73e4bbfbdcf229e5a61388f34937be9e3a4beda1cbfafe2b7b85dc7e096a64499a813c123700c9fa892684d24047e6b0baa91e0981641630ef649f7280c874e584a58ae081e121a4f92ca43d7e5a9ed7a696b75062c8807c0376087a22a84108509c6829edfe5fb5cd046b2dd76da03ba976d43124dac2e307bbcca3f706af7d04d9f353b4306543fd2ca499ab9bcb5cba025992c0e131ecde0673f06e071cd3942fb9ef469f0623d6b90a778499b57a9ceeea6a372bbd4b4f89c34fdbfa03e158d0c4697eaae1751caed4fc21573455100bc777f5ee4efcfd6d5e1941adfa123e2f404fc9df9cbce02d15dc76abb18abf75777b10b9df65aad0a3227b8cae7f363d58d905f9a3c385af3a5f23e526ae9d52da64f3bf3d90409ba31e58df6b390affeffcf09e8ed534eaac14a2b890f482aff7469f6b76ce51af7a0ef01915e957fc3b38f4332b17018247446a0cf2e8f001d3a5aef8cbde87ac289eb38d0d794ab7b2a961356beff0a96bc2fbda53519e5610e5a0a60463a5f643487a24fda926127ec2ec01f7e2996ed97c681b4145fb02281d7abc87217f53c35c747608815eef1aa034c43a36ffce44e77d8fb871ca6ae917e87ea3d0613b1d25aa8e0762d202d9433339e763ebdf336d5156fc4f600776c57e777de6ebd15ffb5f3949878e807448b2da7d48e0e8e21bce1a62654c15c0274d6f3145c5a80b2f33acacf3033b19bfdc6e2819c860fa8f52994e4438d0e94d67f0ed54b7b2c511f907916fc12ac105b3aa2f39d11726cc93a68087a77dcb081fb5d167d182f446f0dbdd39c06ae395c02f22e9489c015a0113939813c5b6e2222543ed2215b977f2478976ddbc0db097d8ee71f2009f71c6721b37c538698ea45f60d765dd17752d5013ede2da6847e66a909d9a3ad8939050e5b842342c00270232d75738e15a44ecf0c5fb75f2aa0eac51705e239131b7034dbf18063f7d78b5403dad0838679fce88191e2294c716382460d4dc68f4934ab9b0d9b633fe1df62cef2fa8832a7400c40129635b2b05d3bb7b13806b0b972a960399e8233539f4b74b5f54d94012dafe068505f506c6439317fed01f9fc8e92739d1eda540eb99b977a38ba0d689568aa7250d3a57e8497609f39cbef6793d6ca17b8892c6e3f2a71c973f30786a8db8ceb6e7bd84d7bc72b184f76f6ae2b2569caf37d5f44faf94cdc9fbbe8ce6bf82d9d56caebcebd5e8c99c5c74dd6d28f616d9a810f16fd5692f0da52ee84121ab1637b5255a1d233495b211f1ca2dce54a68dea2107b36d28e23d0449d8bca63a4da47d6d104342193469ae8d4b6737c5f0d7cf2ba1a2da8ae92c76b254ceb48c9866cabfa0b2d49540e718cb2431e320167f3f08357d1aabda672814d32980e3efc35879200015e8b65df924fb35b546cf135180c5d78d053adee6ecdf71afabe4e2a4986809742bb719944c56cfdb5cb8716e2ded756a13f4431c05ba1dc05c094cbb30e87ac2fd9546d6f9022d75a5eaae9bc2b8df663051db53981e3fb2b4eb31efd155a1514b8805894afe92ccf304d4771efaf418f24869901693179fa569c7c8f7b26277c95d3eb48b011624f3bbaabeba06add92aa08c617e6de4fe88b741aaadd4ab9f0f3a363461b29ec1b9429402bd350ffe9b0628a658e2a5faf81501717ff126d656718e3e6e4aec403e5e035b6f9f45873f3b5a23167f92e0bea3acd58fb37a815c7cf9bbe888c6d9fc51c0d04953f013ac0b2e0e8de88455d102f0e786fea00da846054fbba5340f492613ff68a02232fd3fef3f5369d8367b424505fb8f62390d535e7028a3e2cf5ec3fb1222011d59a1d8bf51fbec1557f47adb0635341599daf8d0ac009904d77125bf80b95ede97b22d4dd9f16d02f176df5df9b6d88c8ae153e2365f2f48c5c64ed365251b4a68ac9aecded95dd980d3781ad98dd54e9720e118792fef8c4ec987577d09d34c2bef6ce8ef9b0467a0cc28b8e516924023e32e3d4b57e7ab41a0044fe47191c742aba66976acdc404780703a419794f182b02ffd98114b94fc87a74ce775cf90cb94106d4cbb54fa6f1a13caa2184b652e50cb97cef083988907984bcdd6ef98e3a06a1218a439aa61f02406e62a667734b96e1d1fd8abb6d8fc6eed11ef3a5bd8ffd55a4f18685b7e4ceda3811fabe24b7766ee6c8abaa1ae37431160b7ae69ed1229da10c4e7587f57c58eaab2d4d5b29a98e17a863ddf356e63a9e34ba25ec1743210f58f2a29e8b7448e28a0b964c75e101662c5371259c08a20decf9e5581c5b03acf15d0def4aaa8f36bcd2e8f761fc63f3935a939363944e638b6f34f628b740d2e334dbfd8481642885584a649b13643d1e1c87a0d9b7ab48b9de5f87075be71c55987aa503cd1f4113a12f312daa13fa4753fa9335c64f7494c8bade3cb19b0142b38db4a665f6044a9e8376a18c2c4e85dd179fe2ac4c274a8c6249fceed2d063cd57221304942f992828e982de69e73db330b63b48436c42b3a55123ad21465f27ea6beedfdd06d031600a24a7e13b899f4b899cc4049032055332186d18a04ec1dab6041e42891143", 0x1000}}, 0x1006)

[  933.207957][T31651] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  933.244202][T31651] bond40 (uninitialized): Released all slaves
[  933.275362][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xc0080, 0x0)
ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}}, 0x0, 0x0, 0x5, 0x0, "a29ad009aab135605c1363421a601094a3873a3c8f2f3ec70821874d6257afd3dc28d9dea678ccaba5492eef9d25677b27a8805262a98c635aa8cf1e3035dfffcb873838f9de108ee5cd497cfd728486"}, 0xd8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xfe00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  933.346524][T31658] bond31: (slave veth145): Enslaving as a backup interface with an up link
19:31:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  933.483621][T31689] Unknown ioctl 1074820173
[  933.491739][T31688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  933.520635][T31689] Unknown ioctl 1074820173
19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xff00}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\xb4\x00\x00\x00\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3[\xc9$\x02\xe3Y\r\x00\x9c\x00\xd7\x87\xf1\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 ', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r0, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '[-\xf1-\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000095}, 0x11)

[  933.603313][T31697] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback={0x0, 0xffffff1f}, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  933.683901][T31697] bond40 (uninitialized): Released all slaves
19:31:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x2)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  933.762117][T31701] bond31: (slave veth147): Enslaving as a backup interface with an up link
[  933.779082][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:36 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x2], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:36 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:36 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000f0", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
r4 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}}, 0x0)
r6 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r7 = socket(0x11, 0x2, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027d8ce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000ffdbdf25150000000a000600aaaaaaaaaaaa00000a0006000180c200000000000a000600aaaaaaaaaaaa00000c00990000000000030000000a000600aaaaaaaaaa00000008000300", @ANYRES32=r8, @ANYBLOB="14c5a1da65e391cfbbfe4301896edcde3ac218bb87ed451ad2e34e9c278670bf592911d6bb1b0dde55cc76bc806704398c31337124cee2e9b3abaf2c84e7a2d6bbfbd72d00000000b7552bda659b72000229015db79a2f5325e89bd246ed09daddb150aa441aae07dc857bbbc5a1f2f1dfe0b199d15434f8592a5ee028d1652ff219adc894d161252eeef6aa13e078bfff828f1100805a046259e5febbd3610e5549d384d569280739202a10af67f1f7c7897ec04cce3f8acbe0fd5fb9e838bb50a337e15e77bbcb5deb8061544a2550477799b41d45b571fa"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9000400221e167d5534379ea9b0094abab5b1e690edf65d7441327b0f2ec1d54b6f360a99baff2cb227436d929bbc415a33f21682d1da21dc948f28b30926326f8a144f29542ee04556bcab351d7914a8965ad1a251cf95562e0b4433e1146c04d1479d462313100"/118, @ANYRES16, @ANYRES32], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004081)
r9 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101082, 0x0)
ioctl$VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000100)={0x0, 0x9, 0x1, "3b9d906f8ea07be0c2884fdd8171235802dc48b69c53a4e875d3b402b8a9bd3e", 0x31424752})
io_uring_enter(r9, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:37 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r6)
r7 = io_uring_setup(0x1, &(0x7f0000000040))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r9, r10, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r2, r10, &(0x7f0000001400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40000001, 0x1, {0x0, r8}}, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x1)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e21, 0x4, @private0, 0x1}}}, 0x38)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x4], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  933.952309][T31728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000002", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  934.009911][T31729] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  934.032299][T31729] bond40 (uninitialized): Released all slaves
19:31:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x3fd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000100)={0xdd, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0]})
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  934.097730][T31732] bond31: (slave veth149): Enslaving as a backup interface with an up link
[  934.112099][T31730] Unknown ioctl -1069525502
19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x6], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  934.205573][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xc5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:37 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:37 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
socket$caif_seqpacket(0x25, 0x5, 0x4)

19:31:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000003", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:37 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = gettid()
tkill(r1, 0x1000000000016)
rt_sigqueueinfo(r1, 0x17, &(0x7f0000000280)={0x3d, 0x1, 0x7ff})
fallocate(r0, 0x3, 0x0, 0x100007dff)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48100)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000040)={<r5=>0x0, @in6={{0xa, 0x4e23, 0xfffffffe, @loopback, 0x80000001}}}, &(0x7f0000000100)=0x84)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = fsmount(r7, 0x1, 0xfa)
ioctl$BLKPBSZGET(r8, 0x127b, &(0x7f0000000300))
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r5, 0x1}, &(0x7f0000000240)=0x8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  934.415762][T31789] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x2e0], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x33a], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000004", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:37 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:37 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8800, 0x0)
syz_io_uring_setup(0x604a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x22000, 0x0)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = fsmount(r6, 0x1, 0xc)
mmap$xdp(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x1, 0x50, r7, 0x100000000)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)

19:31:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xb08, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x1b8, 0x8, 0x0, 0x1, [{0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x31}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PEERS={0x874, 0x8, 0x0, 0x1, [{0x38c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1590434f01f2ab78de294cc9b6ab47d7fffe50ee793028c2b2f2c72b277e76ce"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x2f0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x31}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x35}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b3bc8a8e0dfe6359750155fe78bd3b32cba901f481ba335de5196154ba203496"}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2b4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ALLOWEDIPS={0x204, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffff7, @private2={0xfc, 0x2, [], 0x1}, 0x8}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xb08}, 0x1, 0x0, 0x0, 0x24008891}, 0x20000800)
r7 = openat2(r1, 0xffffffffffffffff, &(0x7f0000000040)={0x100, 0x4, 0x4}, 0x18)
r8 = syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x2, 0x0, 0xffffffff, 0x1ab, 0x0, <r9=>r7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r8, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
ioctl$F2FS_IOC_DEFRAGMENT(r9, 0xc010f508, &(0x7f0000000000)={0x8, 0x27})

19:31:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3cc], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000005", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  934.783822][T31863] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3de], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:38 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3e5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:38 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000006", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
sendto$ax25(r4, &(0x7f0000000000)="fa9e093acdfc26bd2eee6ec99813d96bd6bd231ee11e3c80315275cf7b240e33632ce7215408cf9cde082428f9f8d06bdbe576b7f3dbae91907b5dbd3061a68b01575ad98e117a9723b33e37dbb246618d0e066e1e07de953a6d50f7d01e7ae39bcfbacf9d6ba350d05c62c349a6d9d4ba97b11bd24c8e33cce6a07b178168243ea97292888b77e956210a39df2039b6125aa5145e518eb4a6bea1fd526e31da8f3c65415572caa7085838eca3b1f918881815fb4346fd9c250ec765fde310daa6ad6e836f106ddc05d23340ef", 0xcd, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302)

19:31:40 executing program 3:
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5c13, 0x40840)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@private, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x70, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040024}, 0x11)
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:40 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r1=>0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r5, r6, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r5, r1, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3f5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000007", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x4e8], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  937.521940][T31946] __nla_validate_parse: 5 callbacks suppressed
[  937.521949][T31946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000008", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  937.578210][T31947] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:40 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x2034, 0x0, 0x2, 0x0, 0x0)

19:31:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x600], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(r1, 0x3, 0x0, 0x0)

19:31:40 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  937.789119][T32021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000009", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3a03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = gettid()
tkill(r1, 0x1000000000016)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4301, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4)
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x4, 0x0, 0x8000, 0x1c20af62, 0x100000f0, 0x8, 0x2, 0x9}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
getitimer(0x0, &(0x7f00000000c0))

[  937.968902][T32033] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:41 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f0000000040))
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  938.097879][T32043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3f00], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:41 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000000a", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:41 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r9)
r10 = io_uring_setup(0x1, &(0x7f0000000040))
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r11)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x7, 0x0, r7, 0x0, r8, 0x2, 0x0, 0x0, {0x0, r11}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f0000000100)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x4000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  938.264931][T32091] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xc500], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xcc03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xde03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000000c", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  938.448350][T32101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:41 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  938.576998][T32168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  938.604894][T32169] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x02\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn\xd4\xa16Mj\x9f7\xbb\x85\x8f\xb8T|\xf1\xeaq\x7f\t\xde(\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06H\'_\xa3\xbd(\xde\xbd\x16\xb6\x00\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9\x1a\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83]\xb8\x86d[z\x11\xc9\x11L\xc4\xfa\xc4bL\xc4\xab\xd2!\xa8\xd1\x1e\vTrt\xdefJ\x97\x12H\x16\v\xe0[\x99\x1c\xa3k\x9a\xda\xa1u\xd0\x142\x10\xc5\xa5\t8\xb8\x10\tfO\xbfG\x1e\x80!\x85\xdeI\xcd\x94\x95)\xa3\vk:\x93\x82E\xe4\x1a+\xf4R\xae5\xea7\xbb\xc8\xfb\xa9\xf8\x98\x12j\x95\xbf\xb2;}k\xd2\x19\xd5\xab\x8b\xa7p\x00\x00\x00\x00\x00\x00\x00\b\x97\x95\xc59!\xccEpy\x91\x04\xb3G\xf7\xb6]\xaf\x97\xe2\v\xb9Qw\xf3>\xaa\xdb\xf9\x1f\x86\xe8v\xa9bF~Q\xfb\xcb\xb6\x1c4\xcc\x1fm\xc4\xd6{\x91\xee\xaf\x81\xc2\xe6\x8a\xca\x94\xd6_4\x1ad\xf7\x10]\xf8\xf4\x14\x9e\x10W1\xff\xa4\x9ch\x95\xfb\xf5\\\x92\x12\xb0\x99\xc7W\xd5\xf8R\xe2-\x14n\xb0\x02=/\x0fF*\xd7\x13\xb3\x85_\xfeK\xa7~\x865HDrfU\xc6\x8bk\xf5\xd4\xb8\x99\xa2\xf01m&\x18H\x1b\x11\t\xb2\x04o\xfd\xd75\xe5\xab\x98G\x8d\xfa&\x13z\x86\x12a\xc6HV\xaa\x90\xb1a@s\xb3\rf\xfc\xab\xe8=\xa4\x99\x88_\x9a\x1fz\xd7\x1e\x8d\xbf5\b\xbbs\x86\xa7\x8d\x03\x7fa\x12U\x15C\v\x9b\x146r\xa1\x83\xc5u\xd2@.\x8bl\xe6\'\xa6&\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
ftruncate(r1, 0x3)

19:31:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe002], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:44 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x4001, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000000e", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  941.134309][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  941.174559][T32222] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000000f", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe804], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x800000000000, 0x2)

19:31:44 executing program 4:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x801, 0x0)
flistxattr(r0, &(0x7f00000002c0)=""/4096, 0x1000)
r1 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r1, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  941.484077][T32289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000010", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x2, 0x7, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  941.537798][T32298] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xf503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:44 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x34, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f00000002c0)="7d61d9c5ea3d4d28199bf520e2c3a723c773436db569c15445206417aa0e001829f500074b9c743be7e10bc7e579c48b5fb6da99f95f8d63f43aafbb498051261348117f5d84ca134d03540596e998602df5b5544b617c2ec61b5944483ef49e079ac307aa84ab5b72e47f01fcbf7381ae1e5791532adb23641fb9391706adff427c278fa5feaab53da27a5a24b2ad33a005b820c11226bd1c53f4657bf21f640db4bb2362ec2616432c3355057b738153e40e30", 0xb4}, {&(0x7f0000000380)="436d35afde8b06c26b856b18385bd0a81972893691c24f80c84f48eb726940ee2a437d643caa568d029a63d16e75b97a2e1254f4f1a74fcbc298019252efc174f869a5bf359490684ae6f4465c403c55392d14aeddf3563900bab7f1fae1ce090dddc1e7481f298da22cc2eedde84267b09790ac798c851ee279e6b40283abea41bec63b740acf7d7f864023727270d27f648b10077cf418fc373ba5b031cdc030fd9d1c639e6b2e534d9a4821602da09c22a547636ba3f1e10cadc21c93336300b0bbedd4806997c5365ddf0db4aef07be3909f3263a9c1c7bd374fe6b9040276a64257676f73b8a2", 0xe9, 0xedf6}], 0x200080, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid={'gid', 0x3d, r4}}, {@unhide='unhide'}, {@hide='hide'}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nocompress='nocompress'}, {@overriderock='overriderockperm'}], [{@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, '\'&\\\x8b.}\':{'}}, {@dont_hash='dont_hash'}]})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:44 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000048", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:44 executing program 4:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
tkill(r0, 0x1000000000016)
r2 = gettid()
tkill(r2, 0x1000000000016)
tgkill(r0, r2, 0x9)
r3 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r3, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  941.734354][T32363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x40000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x1000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  941.871604][T32373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  941.910424][T32375] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:45 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
set_mempolicy(0x1, &(0x7f0000000040)=0x3f, 0x9)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000080)=[{0x2}, {0x0, 0xffff}], 0x2)
semctl$GETNCNT(r3, 0x2, 0xe, 0x0)
semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f00000002c0)=""/208)

19:31:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000004c", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:45 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000000100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x14, 0x10, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0xb1ad}, @typed={0x8, 0xe, 0x0, 0x0, @pid=r2}, @generic="d0c8f0a8405b22207cce498bdfebcf9bb7477a93ae229a78f36079de0d4de80f5a1d971449", @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @nested={0xb3, 0x47, 0x0, 0x1, [@generic="d55bce265a467e66585934bb4902df9c122565c9a8228dd417851cd1e29f1c46dc70aec803994d90ea33e7b5bb616c76996c69747858690add5667d0b7e94d03f6b29ec19d19d6c16f05386daf750e43b3ff30fda8d5151c19ac5abd00745d05b1b7102a4b25a1213fa19eb22dd4d8cc2b940b4444a2e2004f57d306d5586995e763025429bbc8e9de7bc2bcb89913cb1298c4614b87d48dd654308c7af6751ee1b6e70530d7e064a0627afe215108"]}]}, 0x114}], 0x1}, 0x8040)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x2000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  942.067721][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x6000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:45 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:45 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000060", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  942.252116][T32439] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  942.290364][T32439] bond49 (uninitialized): Released all slaves
[  942.320861][T32442] bond31: (slave veth169): Enslaving as a backup interface with an up link
19:31:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3a030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fchmod(r0, 0x3)

19:31:47 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000068", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4090, &(0x7f0000000040)=ANY=[])
removexattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)=@known='trusted.overlay.nlink\x00')
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000040)={0x1ff, 0x1, 0x3, 0x400})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000002c0)={0x3ff, 0x4, 0x2})

19:31:47 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = syz_io_uring_complete(0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000480)={0x0, @reserved})
r5 = accept4(r3, 0x0, 0x0, 0x80800)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9}, {0x0, 0xffff}, {0x0, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x16}}, @TCA_RATE={0x6, 0x5, {0x0, 0xe5}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_RATE={0x6, 0x5, {0x36, 0x7f}}]}, 0x4c}}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r10, 0x29, 0x20, 0xff, 0x5, 0x1, @private0, @private2, 0x10, 0x40, 0x1, 0x2}})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f00000005c0)={0x7fffffff, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  944.878531][T32463] __nla_validate_parse: 1 callbacks suppressed
[  944.878542][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  944.918055][T32465] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  944.931050][T32468] overlayfs: missing 'lowerdir'
19:31:48 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x88, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x8, 0xfa, 0x1, 0x41, 0x3, 0x3, 0x2}, 0xc)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={<r8=>r7, 0x3, 0xc727b939a61b0303, 0x3, 0x7f7}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e20, 0xe1, @private1, 0xff}}}, &(0x7f0000000240)=0x84)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000006c", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x3f000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  944.960993][T32465] bond49 (uninitialized): Released all slaves
[  944.987906][T32472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  945.056032][T32475] bond31: (slave veth171): Enslaving as a backup interface with an up link
[  945.084924][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  945.122837][T32468] overlayfs: unrecognized mount option "ÿ
" or missing value
19:31:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000074", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x40000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:48 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c4e, 0x6, 0x1f, 0x5049}, {0x8, 0xef, 0x81, 0x1000}, {0xffff, 0x20, 0x7f, 0x56ef}]})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={{0x3, 0x0, @identifier="9e9713bb92f7349a51d5e7f3e359ebda"}})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:48 executing program 4:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x32)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0))
r3 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = syz_open_dev$vcsu(&(0x7f0000001940)='/dev/vcsu#\x00', 0x1ff, 0x800)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001980)={r9, 0x1ff}, &(0x7f00000019c0)=0x8)
syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r3, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40080890}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xec, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51f25cc6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x691e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x0)
rt_sigreturn()

19:31:48 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x10000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
getpeername$tipc(r5, &(0x7f0000000200)=@name, &(0x7f0000000380)=0x10)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r4, 0x0, 0x0, 0x0)
accept4$vsock_stream(r6, 0x0, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={<r10=>r9, 0x5}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r10, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7f, 0x8, 0x8, 0x2, 0x6a, 0x5, 0x8}, &(0x7f00000001c0)=0x9c)

[  945.294751][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  945.330047][T32511] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  945.340718][   T28] audit: type=1326 audit(1596828708.434:9): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=32509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45fb1a code=0x0
19:31:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xc5000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000007a", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  945.391653][T32511] bond49 (uninitialized): Released all slaves
[  945.464619][T32518] bond31: (slave veth173): Enslaving as a backup interface with an up link
[  945.500481][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:48 executing program 3:
r0 = syz_io_uring_setup(0x1b47, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
accept4$ax25(r3, &(0x7f0000000100)={{0x3, @bcast}, [@null, @bcast, @netrom, @default, @netrom, @bcast, @bcast, @rose]}, &(0x7f0000000040)=0x48, 0x0)

19:31:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xcc030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:48 executing program 4:
syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
syz_io_uring_setup(0x7d1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r3, r4, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, 0x0)
r6 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r6, 0x3, 0x0, 0x100007dff)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x52201, 0x0)
r8 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r9 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00')
r11 = syz_genetlink_get_family_id$netlbl_mgmt(0x0)
sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x178, r11, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0xa4, 0x1, '\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa'}, @NLBL_MGMT_A_DOMAIN={0xa4, 0x1, '\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa'}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000804}, 0x24000880)
fallocate(r8, 0x3, 0x0, 0x100007dff)
r12 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r12, 0x3, 0x0, 0x100007dff)
r13 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r13, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r7, r7, r7, r7, r5, r8, r12, r0, r2, r13], 0xa}, 0x0)

19:31:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000f0", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  945.644607][T32550] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  945.666494][T32550] bond49 (uninitialized): Released all slaves
19:31:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xde030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:48 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000040)="47e51a739d2af282f5dbef8e569d04b410691be20f04262cddc3760863959f0a543c")
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  945.801787][T32561] bond31: (slave veth175): Enslaving as a backup interface with an up link
[  945.823571][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  946.130461][   T28] audit: type=1326 audit(1596828709.224:10): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=32509 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45fb1a code=0x0
19:31:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe0020000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xab, 0x0, r1}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

19:31:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:49 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000100))
r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x80000, 0x5c)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000002c0)={0x8001, 0x0, [], {0x0, @bt={0x9, 0x387d, 0x1, 0x0, 0x2, 0x2, 0x1ff, 0x2, 0x4, 0x400, 0x1ff, 0x1f, 0x6, 0x9, 0x0, 0x11, {0x724, 0x80000001}, 0x40}}})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:49 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  946.230293][T32600] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  946.269693][T32600] bond49 (uninitialized): Released all slaves
19:31:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  946.298516][T32602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:49 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3b6}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000040))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000100)=0x1)

19:31:49 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000f6", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  946.380559][T32616] bond31: (slave veth177): Enslaving as a backup interface with an up link
19:31:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
tkill(r0, 0x1000000000016)
sched_getscheduler(r0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xe8040000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  946.552048][T32639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:49 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  946.600858][T32647] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0xf5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  946.646117][T32647] bond49 (uninitialized): Released all slaves
19:31:49 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000140)=0xfffffff8, 0x4)
r7 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r7, 0x3, 0x0, 0x100007dff)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x1, <r8=>r7, 0x0, &(0x7f0000000040)={0x990a6b, 0x7, [], @ptr=0x7ff}})
fsmount(r8, 0x1, 0xa)
setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f00000002c0)=0x5, 0x4)

19:31:49 executing program 3:
r0 = syz_io_uring_setup(0x2df4, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r2)
r3 = io_uring_setup(0x1, &(0x7f0000000040))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  946.721776][T32654] bond31: (slave veth179): Enslaving as a backup interface with an up link
[  946.756539][T32659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:49 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:49 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x2], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  946.918137][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:50 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}})
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000180c2000000aaaaaaaaaabb86dd604b549f005406"], 0x8e)
splice(r0, 0x0, r2, 0x0, 0x18100, 0x0)
r5 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r5, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  946.969987][T32690] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  947.003155][T32690] bond49 (uninitialized): Released all slaves
[  947.069568][T32695] bond31: (slave veth181): Enslaving as a backup interface with an up link
19:31:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:52 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x4], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:52 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r4)
r5 = io_uring_setup(0x1, &(0x7f0000000040))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="f50975a32a8b240bcf7e3e34f58aa33171a70b52b66a47a7cbe4074e8b6ac804011f0ed6f976fd52584d59495b2baba1d4f5b61b3993d26bdf33c8c3ba106cb228498bf152f99942bd0186a6af53ff099dd3279cdb052e9b798202fbb6443b816088d2f38f44", 0x66}, {&(0x7f00000002c0)="4391de5d6dbf2006a6d9bc12b259887524bd649c14e5ab3e9cc8768294702351de2e1a727e93adf12f55051aeedefc0a8ac5f6a51eb30c494f25ff724530093a7e006aa8ffa2182879c491190b4f35a8a125130bc14d19d674314d2cf42fc8563525f2c28b8c67b01a63cf05c54a2144484a64595de804aec318bf0991c27382e33ef0177c", 0x85}, {&(0x7f0000000380)="ba9999e1d00a7e0fd9507ee946df5c13b5e2535ce4873cd6cc98291cc4d7e8dee644fd5b43ce211f0a99941a447c3ad78d3270c9df2048ed4cdd7f9b3ad09eb7acd6349485a4c7a20798f9376efaca9989bd57f34579b77bbcd0351b65fdc0333f21a8d66aa25b3704eebfd90fc614ae8a575551123440f7c4ab9e80708ba6b04ac23a7266d99f38a3091bf4f55d1f09fb9e126db02f5124a92a95e8d86c2354d7942e32443d412fce5d1f52eb6d4b97b2a74d610afcad6b429bb78e15f68f35e531489e60bf87f2a5", 0xc9}, {&(0x7f0000000040)="30e825a36fb881e7c809bf33923770a42b02ab72dff16a91b5c273d77f1020aaf56c1fd62924f67407fdbf29c925", 0x2e}, {&(0x7f0000000480)="5ea00d4a425d40b87202d19fa3b5945c273022e2926fdce5e8878c9d9e65ac8e6e9e57f402b53d4d66319b9faa89475c16f17e9c1ce331ab969a5134231a4fc1924d4bb8e4dfbd79adf4a90a6ea7edb139dee620801d4afc0e26cf8521810115b4a4f3e3d710ac87b6bc92cd817f22d5cbf2caa8e34c33fa7571d97638e34a7d4038bbbadc0ebf99ba0024fe12360849758cc5bf20bcb170b931ec91ec6447a0973115c0", 0xa4}, {&(0x7f0000000540)="3f1b0f85ed6de5a6548b956ce0c9e628cc87fb42b5750d7352f50b1ebe4e82528fa6762f6d3e52fcca96571707d9c08de51644cb8384daa2ed50eecb7d2bca3340507ee3f1f6d3858ad741473a5574ff02d814510599829e3da35e4f2b2f3ee552030749efbfca1395b1a7ef3249b5a271c1ac81d1094cb436744faae774ac7b2b1a9028b2b0aa27faa8441388412fa96d15bd66c0916c14d4c3c70be16c22a97bcddbe29b", 0xa5}, {&(0x7f00000001c0)="37c540116378ee7180ec2fd7e7fb8523ae2902997fb962ee557b1d001f030bc8e071c859d53733f434c38c882bf69d44fabdaad90ea63e90021c957c730b5327c6b718c5ed2aa6eddfe2a74c027dae71d8e82c399cf3b54255375c39848a23d3426a30bbd2180b1e1ef697cb5523884aa415bed58e889f50", 0x78}, {&(0x7f0000000600)="0031754e1c3a66a4957614a09587cf9d3ada0bbfc2877047a1da424c2767844ee7d49f78d0ff0d5aea6a8f987a629275270e87deacf2ad2c19db6987b93d4308e2af25ec6d0c893a11f6799049e1006e4ae4a64edf0925e68d217be81561f8b452ff06387c9c5c18bf62685c7484eb4e23602355d62aa51a2305f3d3e46ce1ed3c77e13c6281f39af030d7e029a73af7a4088f7b20d6d8d28b53c0b9a6e382bdcf7b9c8fe14bdf4be52cef9547d6dc08ba9f85b09a367fc9bc5b8a75815b65", 0xbf}], 0x8, &(0x7f0000000740)=[{0xe0, 0xff, 0x40000000, "9f8e5a15ba1403d1aacde71f9ad48bb2bbaa6b5faab7ce4cb9ba3eb1507b07e15b058c3987e65d1492e2c492d4da89644cd5455e1696df67b8dabc9ac53d01353915c0cb5d72215e7285d43a4f87f49c4d11140937143606c296f3bce19870e0d438e6196831221b024334d89671176294f42e3337871a0ce2c29253403886bd57bc983e6217a8f96079cb1fef582fdb8837a31876603ded66e208cd2ba5c338d7daa826cd8a2895ea2d9b9cc502ce401a33a8dfad6ced55787af3d5bd8033f3d6f9807a05e043c61f"}, {0xb8, 0x113, 0x1, "10d17ec805d408622a6890048fd8c751c6569b8a3259d86ac1626705ba6b49adaa427b9252fe8b34e29618cc20bea0c912be21f81db2179c53b7017f09621c0792dafb256749983e670cc9ac73ad40ce1a88ad504e061ba8942d6e7b26e566ce6cab503f334bc5d7f8566163b45bea193f1cc070ee0df76abfb75bb974418c3d868375380e881872b41cf7d3f719fc82ecf1644ed3fa77d948f43dd1f46bf80b298398"}, {0x50, 0x109, 0x3f5, "d249f55da89482125d7a0039b733a6d8d3a406ad1f0d010e53ef8c9209e748f92b89bd02182fb20a6f517a8d98d750aaa8332775922583a7fe2e3a29ddc7f8"}], 0x1e8}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:52 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
io_uring_enter(r0, 0x4510, 0x2, 0x0, 0x0, 0x0)

[  949.557503][T32736] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  949.567610][T32736] bond49 (uninitialized): Released all slaves
19:31:52 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x6], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:52 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8)
recvfrom$packet(r5, &(0x7f00000002c0)=""/4096, 0x1000, 0x40, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  949.655724][T32736] bond31: (slave veth183): Enslaving as a backup interface with an up link
19:31:52 executing program 4:
syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x25b, 0x0, <r0=>0xffffffffffffffff}, &(0x7f0000eee000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100, 0x101800)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000100))
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee7000/0xd000)=nil, 0xd000, 0x3000000, 0x11, 0xffffffffffffffff, 0x8000000)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000140))
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0xb, @vbi={0x8, 0x5, 0x9, 0x38415262, [0x6, 0xdf], [0x5], 0x1}})
syz_io_uring_submit(r3, r1, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000240)}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
io_uring_enter(r5, 0x4510, 0x0, 0x1, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r6=>0xffffffffffffffff, 0x5, 0xfffffffffffffffe, 0x7})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, 0x140c, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4010)

19:31:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0xfffffffffffffffd, 0x2)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0xfffffff8, @multicast})

19:31:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xc5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:52 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x2e0], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  949.907322][  T324] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:31:53 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  949.975206][  T324] bond49 (uninitialized): Released all slaves
[  949.998681][  T330] __nla_validate_parse: 2 callbacks suppressed
[  949.998690][  T330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  950.049318][  T333] bond31: (slave veth185): Enslaving as a backup interface with an up link
19:31:53 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="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", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r6 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r7, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x5, 0xe9b7, &(0x7f0000000740)="e87d10ea3e969500f2f8fadd5eedae208e31980202c10b2c0bd1b4ebd028590b8ba69265e9f640ff80c7118ed0c1212427a8014a59c1adc58ffd4c47", 0x3c, 0x4, 0x0, {0x0, r10}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x33a], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100007dff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  950.191479][  T352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3cc], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'gre0\x00', {}, 0xffff})
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  950.406993][  T376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:31:53 executing program 4:
r0 = syz_io_uring_setup(0x1b06, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x376}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3de], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  950.647480][  T399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3e5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:53 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  950.803986][  T423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:53 executing program 4:
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)={0x0, 0x3ff})
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x4, 0x0, 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006)
io_uring_enter(0xffffffffffffffff, 0x7164, 0x800000, 0x2, 0x0, 0x0)

19:31:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7\x9at\x98h>(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xad\xf3\xb07#-\r\xe9\xb2\xf3\x12N\x1d\x85\x9f7\xbb\x85\x8f\xb8T|\x84\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa\x00\x00\x00\x00\xf9\xcc\xc36A\x1d\x90\x14/dm\xdb\xdf/,\xc9\x16\x82\x7f \x17\xcd\xd4\xe0T\x91\xedN\xb4%-\xcd\x80\x0f5c`\xe0*$Ja\xce\x19\xee\xb16\xdb)\xd0\xeed\xd4A\x96\x98)\xe3/L\xa0\xa3K\x8b\xbc\xf1\br*&K\nB\xfa', 0x0)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3f5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  951.029934][  T435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x4e8], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x97d, @mcast1, 0x7f}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet(0x2, 0x3, 0xfff)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x4b1e1352}, &(0x7f00000002c0)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r5 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x1000)
ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f0000000100)={0x0, 0x100, 0x6, 0x2, 0x100})
r6 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
utimensat(r10, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}, 0x100)
io_uring_enter(r6, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
msync(&(0x7f00006d7000/0x1000)=nil, 0x1000, 0x2)

19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x600], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  951.248288][  T451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:54 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100007dff)
io_setup(0x401, &(0x7f0000000000)=<r1=>0x0)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x301040, 0x0)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r7, 0x3, 0x0, 0x100007dff)
r8 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r8, 0x3, 0x0, 0x100007dff)
r9 = dup2(r7, r8)
r10 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r10, 0x3, 0x0, 0x100007dff)
io_submit(r1, 0x6, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f0000000040)="34eaa9934e3697946d0cb8f6470f53a3fda8eae4a319c2f0bf21cf36d3f79b3a46712998edb19db48bb236e8ef0f46d23cd8cdf00d3842feb4e648b9d459f7", 0x3f, 0x3, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f00000000c0)="67436a793c76545f182445dc40e6abf4d50a8b2b957bdfbfaadba0a03f4fac1467741dca07feceed546fa9a8effcf9cb6f4811ab1dcf6a64121feac9cadaa2f124d324a9e072530f7fe9819c", 0x4c, 0x0, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000180)="8017293b71bf4ee2f00051d385727a9fcf1dd11eceec90c969f9d0ca1ba63ef7f9b53125344dbd9b42d85c310fd07a2daddd73e35c87af75c45af1b689d6c5ce8a19b9da6a485b869db460a6e40dcf", 0x4f, 0x1, 0x0, 0x0, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x1ff, r4, &(0x7f0000000280)="acae4702b3ea6c0dc5f00d0feb8fabdd3d513b472f498088cb41509ede386ad09edaf08f816091c541d8991c56d9f2ba7be03a429547c43625f62a141fe1fc7d0a9f2dd83180d4d39812572691d8f9a0ccb7296ae5d57b5be4beef3bcbf55467858b48742fe6e89d50313c4a1d56cc9cfa8a9f12092a0dde78c6c6ef31ee5c46b2cd90ca300b2e844448e25630680b2f15224b77858ab37a7504f5804236381e016f3279beb3e69956d1de857dee522617ae78b4c464eb2d4ed3544f7ccf8d5b1114ceccd2cdc93dca63109a2d1c405d502982", 0xd3, 0xe0c0, 0x0, 0x2, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f00000003c0)="21b29e4cf1f82fe325a025041aef2479ef381a7a497dda3b9ff423ee3b650173bc22def4fa9d1b7304836df621cd5178554838111481ac78c41a57bbdf34544f4f09d4a046960639d6784bc2ec5392cac339b933da43348bf3b084776993398a5d3cf96aa9591c429f1010137280e061bc3a5160e937537175436bcde1b878cf604de6936674a2fcf5bc9768351b89428422bf4acf879b782b38e97d48855074c2522f26277a9164116e252017575b15f2e943a2dc9b3b33eab7f8ec499e73d5aea0945aa87e85df4e91f63a3d9f05fd857bd40ec127462a7e419e335a011c42a62ddeb4ef4cd8", 0xe7, 0x8a, 0x0, 0x4, r9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x1, r10, &(0x7f0000000500)="aa5e0d40800d1f6575a32d6a43aede2f7fd77fdb1961ec", 0x17, 0x4, 0x0, 0x2}])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3a03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  951.500403][  T476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3f00], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000080001000000000008000100000000000800010002000000080001000008000100000000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002)

[  951.686037][  T489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x4000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:54 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000065", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  951.876592][  T508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xc500], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$NBD_SET_SIZE(r2, 0xab02, 0x80000000)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xcc03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000058", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xde03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00')
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4)

19:31:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe002], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4d74, 0xa00, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc6}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200000, 0x0)
ioctl$TIOCSTI(r0, 0x5412, 0x8)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe804], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = socket$inet6(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8948, &(0x7f0000000000)={'bond0\x00'})
r3 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000256caa00000900000000000000000000050000090900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008804}, 0x2)

19:31:55 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xf503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x40000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:56 executing program 5:
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x1, 0x30000000}]}, 0xc, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x9, 0x4, 0x8, 0x400, 0x7ba81ec0, 0xfff, 0xa3, 0x36]})
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x1000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:56 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x220}, 0x1, {0x0, r5}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x98, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xb6, 0x2}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0x1, 0x4, 0x8, 0x5}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x6, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0x1000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "10943696895eccee72cc9ed6a44c38ee"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41d}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "135c2592dc04224a6e6b3f12"}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "5542e0fca749ab5fd4b7f8197d375d7c64625259d891c6c44ed626fb13a4d61f4aa41656c5007aa0ef8f578b11ca69dfabd9e7f9d84d55ec3b5ba514bb07848773ff2866f7695c55fc9caab9f8fd0c7e50a8ab3102599de3ede034a49fd4d0a35bc493f8bdff07b7007a15ad1d3ab1d0b8cb414059931c7ddcb6346d2f537ab0fc3c27a4e9163f50cffc5ec03661092924359d6ad3ac79fc2a622bc6ee42ef973791e87c9a5f775d1a625a2b1048a95d8494ddca53d898"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x402}}]})
syz_usb_ep_write(r0, 0xc1, 0x56, &(0x7f0000000440)="86484c6f449b639b18a686d8703f9073126dab79a41ad36f8603183c78d418bfed23542f96bf91d69b42549e23d6ee8efd1f927d9dafd8c3c1c2a05ecfaa56921ec6fd9a24f5cc7d1a482b2b734101d0f0dc056740dd")
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "9c2fc35aac5fe726dfb446e0fb645828"}, 0x11, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000004c0)={0x401, 0x107a, 0x10000, 0x80, 0x1, "86fb7866adbbf88ef5ca7ef5a0abc73eb0057d", 0xff, 0x5})
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x2000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:56 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000200f70300042abdec8ec72332df2500"], 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x80)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x6000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000003", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  953.594219][T21784] usb 6-1: new high-speed USB device number 4 using dummy_hcd
19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3a030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:56 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:56 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r8=>r7, 0x7800, 0x7, 0x3, 0x0, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x64, 0x0, 0x1, 0x14, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x8, 0xb8, 0x0, 0x8, [0x0]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xd, 0x0, [{0x5, 0x7, "e444903d74"}]}, @generic={0x86, 0xf, "4b58255c0fe1a94fdbe1af04fc"}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0xe, "971dbcd150569d18434a7270"}, {0x1, 0x9, "b0e27597b0ff9b"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', r8})
r9 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r9, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x3f000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  953.844001][T21784] usb 6-1: Using ep0 maxpacket: 16
[  954.044652][T21784] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  954.234676][T21784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  954.243755][T21784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.284008][T21784] usb 6-1: Product: 䉕ﳠ䦧徫럔᧸��扤奒釘쓆홎ﬦ�ῖꑊ嘖Å�迯譗쨑裏䷘嬻ᒥ޻螄ｳ昨槷啜鳼릪ﷸ縌�ㆫ夂��풟�쑛ﾽ뜇稀괕�킱쮸��紜뛜洴匯�㳼�ᛩ倿��愶⤉㔤�곓ﱹ截옫䋮韯鄷糨徚嵷戚⭚�嶩钄�
[  954.343979][T21784] usb 6-1: Manufacturer: 尓鈥Ӝ䨢歮ሿ
[  954.349837][T21784] usb 6-1: SerialNumber: Ђ
[  954.385811][  T623] raw-gadget gadget: fail, usb_ep_enable returned -22
19:31:57 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00', <r5=>r4})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1c4, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x4008814)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:31:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x40000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x4c800, 0x0)
recvfrom$rose(r1, &(0x7f00000003c0)=""/132, 0x84, 0x1, &(0x7f0000000480)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:31:57 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  954.764029][T21784] usblp: can't set desired altsetting 0 on interface 0
[  954.794344][T21784] usb 6-1: USB disconnect, device number 4
19:31:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xc5000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000016)
r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_vs\x00')
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
dup(r3)

19:31:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:58 executing program 4:
syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)="d0f2d1381b24cdf3af72899bdee3dcb2ed65a6fe37c9e608ba642253e1a4a056393954ee0d997d3c00c96e4e27eab781c5a4e8867e55ca8ed7808b0e9d8933be9bb0cdc4a8abc1fb36ca263344bbb25f55a0472eb9ac000544f2a10ab063dec101530c9d70bcd2a86878816d9d9626d19b5771de565e82b6c3b3bf555959661b06a058fe74f81e3de8e78c46800ee25dd3164d2da8c42df6821eff8425b0ec8aba92a0cae67fcbc71af3feeffed0869323023cd1ef67d079c8fe", 0xba}, {&(0x7f0000000380)="b9badff94f9d779bd22100944e24bacbc969ccd923a7e886a9a5d9c7000dd9aeb089c0a8dc38325583177d36e7f839aac2c58130d54e14f8e1cdc370fa5fdd94ccb844893dec55d388cc5d56509ee0119a6812767cb815d75f747a6cc7d7b2f8942a2ca0cd8190d34486d50f35b6ddb162c086a60cc190759bf45dd6e371c106c2ecd27100f09375fda2c46e3c8b261cb9086e25b50a9f949e8979aa067f1b92ce47f0a84e38bb4b9c12544df770a7918755a8ba5ac05b931f2b94392ea3c5660ff52eadfee4771acd235f024b6b1683de67370f4b1a306294b242cdcdd5c687e0876df67ee57ecfd697a095e4623f394606298b1845f0eec857acf2d567", 0xfe}, {&(0x7f0000000100)="4b73a264af93b9a5bc0ada11dfbd0a084fd43ee5c1ffc66c96a83cae5fe1a345e5574ccd511b4169e662209c60d992db47ff703edd8f83e52bab5e2e1f6312837bb854597ab5e2c4825e6e55462812b5f9ae78691d685a5a2337eccae9", 0x5d}, {&(0x7f00000001c0)="43e0a48f176ffcb4b1420ee1998cc07b00d4d720c7323fea91b812d35809fadf4dd26c5a6f589d4161d2f481e23ac2ae0e0ad1057607973bfdac83a1652caa8a74d961f6ed25c4619239eb33a15dff6e8135554f4c708532a5cdb96f4b524c31dd8ee10f", 0x64}], 0x4)
syz_open_dev$char_raw(&(0x7f00000004c0)='/dev/raw/raw#\x00', 0x0, 0x8000)
syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)

19:31:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xcc030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  955.115486][  T760] __nla_validate_parse: 16 callbacks suppressed
[  955.115495][  T760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:58 executing program 4:
r0 = syz_io_uring_setup(0x1b44, &(0x7f0000000080)={0x0, 0x15af, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  955.182811][  T761] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:31:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xde030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:31:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:31:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:31:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe0020000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  955.377629][  T788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:31:58 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x800000, 0x20010, r4, 0x8000000)
r5 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept4$vsock_stream(r7, 0x0, 0x0, 0x0)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000480)={{{@in=@private}}, {{@in6=@private0}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000040)=0x28)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x79c)

19:31:58 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  955.460685][  T797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  955.611126][  T812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={r5, 0xfb, "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"}, &(0x7f0000000140)=0x103)

19:32:01 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000100)=""/118)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:01 executing program 3:
r0 = syz_io_uring_setup(0x10fa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4$vsock_stream(r5, 0x0, 0x0, 0x0)
sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)

[  958.076941][  T836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  958.124448][  T837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xe8040000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:01 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e22, 0xa4, @mcast1, 0x7a6}}}, 0x3a)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  958.222632][  T867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:01 executing program 3:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  958.380754][  T882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  958.405932][  T883] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:01 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x200000000000003, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x1f, 0x4)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
recvmmsg(r4, &(0x7f00000012c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000240)=""/69, 0x45}], 0x2, &(0x7f0000000300)=""/133, 0x85}, 0xd772}, {{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/133, 0x85}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/114, 0x72}], 0x8, &(0x7f0000000ac0)=""/60, 0x3c}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/50, 0x32}, {&(0x7f0000000b40)=""/2, 0x2}], 0x2}, 0x16}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/110, 0x6e}], 0x1, &(0x7f0000000d00)=""/49, 0x31}, 0x8}, {{&(0x7f0000000d40)=@isdn, 0x80, &(0x7f0000001240)=[{&(0x7f0000000dc0)=""/203, 0xcb}, {&(0x7f0000000ec0)=""/51, 0x33}, {&(0x7f0000000f00)=""/230, 0xe6}, {&(0x7f0000001000)=""/126, 0x7e}, {&(0x7f0000001080)=""/123, 0x7b}, {&(0x7f0000001100)=""/238, 0xee}, {&(0x7f0000001200)=""/36, 0x24}], 0x7}, 0x1}], 0x5, 0x40010000, &(0x7f0000001400)={0x77359400})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0xf5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:01 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, &(0x7f0000000100)={0x1, 0x7, 0x0})
r6 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000040))
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x164, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1c, 0x3, "b8857b2854314e4b754d6b6b69cf78917f07b20dc9d8d80e"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "3746108b29854cecfa6c31c37e94e1cf87d311f47674caa61fcd5c5b89539db4"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "95ff1f456983232f8b4ac1891701ff0b5281df71c35b1c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe799}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x0)

19:32:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:01 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$CAPI_INSTALLED(r4, 0x80024322)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x2], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:01 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x4], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:02 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x17c, 0x0, 0x0, 0x0, 0x0)

19:32:02 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r7)
r8 = io_uring_setup(0x1, &(0x7f0000000040))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x4, 0x4, {0x0, r4}, 0xffff0e38, 0x1, 0x0, {0x0, r9, r5}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:02 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x6], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:02 executing program 3:
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  959.619223][  T994] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.627956][  T994] bridge0: port 1(bridge_slave_0) entered disabled state
19:32:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xc5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  959.693106][  T994] device bridge0 entered promiscuous mode
19:32:02 executing program 3:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x2e0], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  960.319673][ T1020] __nla_validate_parse: 9 callbacks suppressed
[  960.319682][ T1020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:03 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000030305000000000000005f9d000000010c006d00fffffffdffffffff08000340000000020c000200ffe4667155739817d0893e769567d1e6ffffff000001ff08000340000000020c000200000000000000e2860c000200ff19ffff000082c80c000200192e933f6826befa08000340007ffffd63f0768f7c3c04697840cd73d0cd26eec25b15a6450ce2771e56"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x33a], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:03 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
fsync(r4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
open(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x5)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000100)="b1d5ddae4b36c563a3fbe76f8a3214a211b17330ad7d5a2ec40eb299a83104f1afb002a25893d52d4acd339d086cab9c3519c9d0f9", &(0x7f0000000300)=""/4096, &(0x7f0000001300)="b27517deafc1cae18b03c24c414ee20a2bab65449cf73daa376d49f46b007aa928c3389cc1e618d57f63749d726fef6b2d6e121fd16ad3e7e9e1a4503410d86ffc24015046405e1701a19995c5e84294052869df466a8785c32640c68af9921c592797594feb157d2e0e8cfe463795697d17dcdd6b1577cea4c88dab22af233f4a21af64b0da1ff5e7735263ef3f3197a6b85f1d05dca864f4d1a9b5bed5f714b05a7a8830", &(0x7f00000013c0)="59ab2637a17b060c4771770e7ab1fc6c94c1d60c5d92a52bd7e3a6450d189b6f3eac279fd25077ca00a95874473010255047bd898c3727e916918a4a0169d41be5de941bce6157e522acb7a764d4f3ed6138d763f1d687a50e3867be8ebaab7aba3f9b98f3e142ed369378bfd4df523223eb29c9ed040c21d1ec5b6eb445f9fc8b0bf3ce8d5b6e9e325f9f77187acd9d19e2281790ad9166824f1b2fe508a5b6cf7edca698e7d8252067bd20df9092d3e0391f8615468ea7c38785c6af6b8641907bb5f0b5", 0x532, r3, 0x4}, 0x38)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, &(0x7f0000000240)="3ec7c1af0970a801bfe1d4858499ef6d238936db3f7cb9e7854463c5a2f33a21761722ac1dc6363be3e895fb0148b2c74cb16a981e8e4a5174c9387eed8081a5642e815d5cd0241bba0ab78fafefbafcef53426fa8cb19db7f0f8882b983447afbe5d2e233a0f11bdc0e3fbfe0798e704a17c6313f6317d800679f8530a81e8b9f4d78239a8f26b1f3457f2cf32e8547c2980a7b38a5a65c3303055c9b29582d5bd60e584202c31122331e0fccaf71b530b30bad526394708731f9bc28", 0x1}, 0x0)
r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil)
shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmctl$SHM_UNLOCK(r6, 0xc)
prctl$PR_SET_FPEXC(0xc, 0x20000)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3cc], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  960.611916][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  960.649455][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:03 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3de], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:03 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:03 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200000, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1140, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:03 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x12040, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x600000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000100)={{0x2, 0x0, 0x4, 0x3, 0xbe}, 0x6b, 0x1f})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3e5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  960.885201][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x54b31000)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:04 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000040))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x30}, 0x7, 0x1, 0x0, 0x4, 0x1000, 0x7}, 0x20)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x801, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
accept4$vsock_stream(r8, 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x5, @empty}, {0xa, 0x4, 0xfffffff8, @private2, 0x1}, 0x8, [0x1, 0x1, 0x10000, 0x9, 0x10001, 0x9, 0x100, 0x1]}, 0x5c)
io_uring_enter(r0, 0x450d, 0x0, 0x1, 0x0, 0x0)

19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3f5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  961.084574][ T1123] bond49: (slave veth187): Enslaving as an active interface with an up link
[  961.099786][ T1123] device bond49 entered promiscuous mode
[  961.105756][ T1123] device veth187 entered promiscuous mode
[  961.118197][ T1123] 8021q: adding VLAN 0 to HW filter on device bond49
19:32:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  961.180266][ T1174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
tkill(r2, 0x1000000000016)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x9, 0x9, 0x2, 0x1, 0x0, 0x9, 0x800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x10001, 0x1}, 0x8, 0x100000001, 0x200, 0x1, 0xa107, 0x0, 0x9}, r2, 0x10, r1, 0x0)
r3 = dup(r1)
r4 = syz_io_uring_setup(0x1b46, &(0x7f0000000100)={0x0, 0x40, 0x1, 0x2, 0x0, 0x0, r3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r7, 0x3, 0x0, 0x100007dff)
ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f00000002c0)="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")
syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r4, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:04 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f00000001c0)={0x0, 0x0, 0x10}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000100)={0x4, 0x0, 0x3, @stepwise={0x100, 0x7, 0xfff, 0x4, 0x4, 0xe4c6}})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

19:32:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
sendmmsg$nfc_llcp(r1, &(0x7f0000001240)=[{&(0x7f0000000040)={0x27, 0x0, 0x1, 0x6, 0x1, 0x4, "355479c51661fdd3f7730bb670672278e3fc79f8ad9e46984ceb510255e62bed311bcdf178839b0c878a1572ca4d96374845a986dda50c3a78ae9486788596", 0x12}, 0x60, &(0x7f0000000580)=[{&(0x7f00000000c0)="1a2c1de5e62dad1301b8447d2fe82cec3e4d2fcefb13a08a9b800ed66c9410121eefbc41ddbfb7c1a293eef141b1105ed9305f89cfb7a3bddf2a9ac7e316331cc62e407ace76604c36dfa65803777c0ac2e3503b2dd337fe6f175b3023f470c957b2d72557e661f91edf57458e35ad37f35dade1832f63aff13e1bc9f7f457c9ff", 0x81}, {&(0x7f0000000240)="0ad6cf38b3f96d5da9fa4a9a0c", 0xd}, {&(0x7f0000000280)="84fd29f8bfa1d50e67e0810cb688a42e541f39a9f186d096ffb73861939851cac62fcf49ab178535ebc9d016cbc216d8618167104217569c29d5185f9685b195d925029728c71db8c0cd030200de3e38dccf313d685ebf79df04941f586b61ab975065", 0x63}, {&(0x7f0000000300)="04ba115e877785b1486aa02c7754fb8c2c96c43988e78371d3d92d03ed440a9962d01240bc308e33c26e898addccfab90a5061bb7af551c6c40ca4f5a5346ba4c98a400a8244a32ed4ebbf02575068a2ace14a2d3f3ab261645a04c1d6f49df52f5d89395a811ae8742dae8f0423338f53db9a09", 0x74}, {&(0x7f0000000380)="ad92e160f4481b37896bc8620533bee2742196bf26ac9d0d4ea75804293c3fa1f517393f9aae39ea8fa050e0968eb627d4e125bf8e0c04c2a01ba61f33fb316ed2", 0x41}, {&(0x7f0000000400)="52db595b7b53bb970a9c682c2f9c3d460ab5c4ec6d54689b47a67e25ce8d37cafd14cf404341d0c71e7adf3eab4d5e2cfba94ccc6d8a62b499e0b5b11d9bd0939973406916ca6a930e6e46b8f889a055fd9b00fcbabc373941d66d810a307dbe1af18db5f8602309cff0f94ea6eab7d5a6fc9ae35132aebb64421116ba21", 0x7e}, {&(0x7f0000000480)="7b555095c691db762e4443e8fd0c514e7c82da77de4139d491fac93ac04e22d42e831d1bae66bda8ae5a67cf474a88b2d4d8ace2735f46b52698ce49b670414f19a0a44165bf6fab1cb55bfdef6fa017b6eaae257bad", 0x56}, {&(0x7f0000000500)="0cee41fdf14d63e38bc8a7158b6e3846026ee26fe5afa0e7e51890e7a3c85ca05199780f0ff8f68c7c1b1dd13f9b90fd53e345f7ccd1df4bf938b3c1e2f044418fc6da11206da9b9a70308374c5df211a5546fdb980d9935c8c9ada1eacb11b98668300e", 0x64}], 0x8, &(0x7f0000000600)={0xb8, 0x105, 0x8, "963e564beff0cd4264c63aacc922cb7001de09c24fd02546471881f0a7000a58a13097e292ff262b33a50c9589f9212e867f003bc3ddd73e2562010af37cbe6743f055f2fdc3bb93e3b40f0fa5956f9586b0a493945db62983f7de31f09fc04b17ac12a4607a99292a0f49b172a0469032cb3aa9744e75f6df720eb2869f03e5b4cc91b840fa1e1c135aae92c67be9a16e7b20099465464c218f78b0bbb8fcb7083bc32cbcf4"}, 0xb8, 0x4}, {&(0x7f00000006c0)={0x27, 0x1, 0x0, 0x5, 0x40, 0x3f, "2658c019fb8383a47c24e824032304e870d1461946c7f5ab613c769932b39a6ca81a32bbd2205769fe82815ac8e15a4a55cd60685ab60a09489c263f671569", 0x32}, 0x60, &(0x7f0000000740), 0x0, &(0x7f0000000780)={0xc8, 0x109, 0x5, "6cea8befa6887d6fbecead8f13f66b77e7dc5da873016c31cd5e68bf87240a92ec64be8c5c7419608b25869737fbfdfa7f7aa2b403b64e7f3944e992f9b7263eb4166b31762ecc21dd8f637a6b27df236f6dba41903fdfd8b5f27f1b4a10da31a5bd6debe114fc6eee86429675746ca9203f6d3daa2ee456792d5ae2e1c827986ebae9904af78142fb114f912228d166dcdb46086708d9c8ac1dc5267c5e40674ea6352603bbad04f07fe70db79dbf01702e6817"}, 0xc8, 0x4004}, {&(0x7f0000000880)={0x27, 0x1, 0x0, 0x7, 0x7, 0x8, "21ab615a6a594ec4ece475d4db48e42c23924b5a617f12a98ec55f51a1fce789154ffa77429bb4b1132ced3becb9477e004cdded4b56dc46c5dbbf1918d1a8", 0x31}, 0x60, &(0x7f0000000c40)=[{&(0x7f0000000900)="0edfa7f433f3b370ab7b1653da9bc238a7489d6e250594574188150ed940cfa82e5c16768a175f64036f8e8aa59fcdebb8f967dc7017bedf1479cf57596f72dc3c98392c5325055161eb49fd2a59297cb9c6d5ddd330de89ea0e8a110c64c005ca5e5aaadb61a393e75c8ce9ba4c381b174f7c8d9899d41471216b3b1d5cd14f19d445380cb8883fbc307a0629cbf76d9337aa52b9d3637946844c0dbc98932258ba0af34e556db591becd62", 0xac}, {&(0x7f00000009c0)="84f86bef7ee7b50173d27ef9de4f9e7b32a0b1eae9bddce46f0028f84bdfacefe4cd479116296393c181b9402ca5114904cec5e50b8c3953e2e713e1cdf8da22989d282fe1b0b3e7499565899819e63328189b5202374455b3f20eff22196afa1bf5aa05e65c485d67b175bde17a797bdc2eeb1b5ca2c2360f9e4ae29af80cf53c92b94bbdfe07871d33b1ffa2801116b4c815a2dadddd498b3e7d38577b64015f40fb2496a16d859177e78381f92753a8f65b7ad89321af17ced3a083c932a3741c3690d0d8a88280234ad7f7109970a889d2", 0xd3}, {&(0x7f0000000ac0)="78718907f13cb54bf78e760c87bf274d092776c5fec7f07b967518ad017454819e2adca6a1672dd6e33001dd424a54ead09869c7e14ff08abadbb0603e735686c17ead9098a4763c9005c9d9d5d7eea56ae0d5efe735b0e99ead6012365ff6fd82a083a84929b63050b94855c45d323d7e9e54bca4480a7308492dce6d9cec7e5149f19bed21a23904977336df7a74ad989ebf0d40d2ec078e3ed564d9d72979a7a3bee6c41f4ba7d9cb1dd9157430ac9c3979aa52fcf6c7e548e1f5da384b0adbf4d2740ff7c57e402b2f86", 0xcc}, {&(0x7f0000000bc0)="d5467a89", 0x4}, {&(0x7f0000000c00)="ec478d10103ee8f0588955dd310d8d3b5e1cbb60faf094c99fdd2878f1a0e3e27ac498dad1d133ac1ae7380d86efb2d57d97de8428a1f0ae01238b57", 0x3c}], 0x5, &(0x7f0000000cc0)={0x60, 0xff, 0x10001, "525a89620ffcf249a4122fde82de47855f2714eb31b3739296e9fb6037ec26b58e647fc653ca0a3dc2d6f3ffdccb0cef5ad6f0cffbd3c1d20ddf1f9e1f0de4a62ea99c0569ed5e7ce00b4197"}, 0x60, 0x40080}, {&(0x7f0000000d40)={0x27, 0x0, 0x0, 0x6, 0xaf, 0x7f, "cc7041b437372420c9375092089ee7058cb299f7730c1cf5ef008c0c68257727f0c55cf0dd99e3be21016a007f218d8c20f5d0ea7de50925bce8fff1258a38", 0x33}, 0x60, &(0x7f0000001140)=[{&(0x7f0000000dc0)="482afa6c982b1b555641a905bb44cf4ca1e6bc8fa7ca6fb5d798988ee60cf16c621438173c837edb86b9d56d8b1cf0ab226f554037ef55558fad924d3e44cb8cde6c1796033b2ec3fa271e14c533dc5580d2e4d270e690f61a9d4d098a585b72693577f6e88cb47ca6350b0532f007c5cf380e87ca9e4bdaa4ad6b5fc690e9988461e4dde10bb11fb96084eca65e475aedcea56f9bcd5968f4f2f8b9420b110ab6f33ea2886e222dc97fc64f544db4a37c1f14fa11627a91eb5af6ed", 0xbc}, {&(0x7f0000000e80)="7244212d55b4130b0901467e110dfc0f6fa13167", 0x14}, {&(0x7f0000000ec0)="b57550475785427ceced832c8f116ea1de21151639335e40f15f7f0855", 0x1d}, {&(0x7f0000000f00)="9693fd1a184c53a5123b3a48e2c07859a0e01643259f22444d2154e7ea07ad6b1722e495170edf926d48f345a4a354c616168fa2b572a45b3d9d089c8de36a387946c0cf9aca47c368fa861742ca4f2fb4d396badd18bdc349a0d359f6428e3f2875500b375cfcb68b65ab5e03f160ac44adb17a983e9d54f8389ae12617d9ca0679158007dc38de0beefddcbffe3a9f1be2b829d60c4f75920c24dce8e7b429a2d6dd8d2b92325b7194ad4857087e98bfa20d0721d73b21539669de0829d43be2b4c4b27b278641746a31e09fda4edb6db854c14e", 0xd5}, {&(0x7f0000001000)="1903cd1b11fc5187d5dd17e1651c301ae0b59d4bcd6d61737b32565b88ee43cc94b64e7f139605c5862de688293c9416ec790ab33968c5cd0616da8a5bb0093e29b5bbff64525544cae1954e", 0x4c}, {&(0x7f0000001080)="ec7b9eb35d85d10c3a1db11957a13404ce93f9545c6a1cca458c73076d3b9831c55ca79d88bd1a6f8a2d49303eb5a3f004ac67ecaca17ac8f7416085fffea7f1317f92cbcdc68e6ea9957eb7fa11f3a0cc022d4c67edaabcd0611b454a087e4a8ec05a4cd2f9639a58a68d32eaee92f929892d5e531df7ed8ff5ab904b7615511a0171793c72eb23e3ec9dfdfba1f1c50eb1f166911ac8ee0f8ed9405b10ac2f9693bccce0d4f0b589b788ead0b8ad188e0644a33f68697899b61166bf201487", 0xc0}], 0x6, &(0x7f00000011c0)={0x50, 0x88, 0x1, "9bcd0c7a7875cd8442ba693bbadc70244e14cbfa54d64baa8c229b0527f24facacd87d8948b968981fae4aca3f5ef271d177dcbd1db16ed6e9541965614e"}, 0x50, 0x2000c084}], 0x4, 0x4c841)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x18)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000740))

19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x4e8], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x600], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3a03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  961.541320][ T1236] bond50: (slave veth189): Enslaving as an active interface with an up link
19:32:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x6, "92250dc6340ecd06c105fa2b4094e8601a564454ed16ad790879721947364b05", 0x1, 0x4, 0x5, 0x10000, 0x4010004, 0x2})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  961.589977][ T1242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  961.621674][ T1255] device bond50 entered promiscuous mode
19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3f00], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  961.638743][ T1255] device veth189 entered promiscuous mode
19:32:04 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  961.663326][ T1255] 8021q: adding VLAN 0 to HW filter on device bond50
19:32:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x4000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  961.811132][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  961.944415][ T1305] bond51: (slave veth191): Enslaving as an active interface with an up link
[  961.978558][ T1276] device bond51 entered promiscuous mode
[  961.986610][ T1276] device veth191 entered promiscuous mode
[  962.002909][ T1276] 8021q: adding VLAN 0 to HW filter on device bond51
[  962.494382][  T645] IPv6: ADDRCONF(NETDEV_CHANGE): bond50: link becomes ready
19:32:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000040))
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
fallocate(r2, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:07 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000002c0)={0x8, @output={0x0, 0x0, {0x8, 0x1ca8}, 0xc, 0x7fff}})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000100)=0xf900)

19:32:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xc500], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:07 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001540))
r1 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r1, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/adsp1\x00', 0x220101, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
accept4$vsock_stream(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4)
openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000001500)='/dev/raw/rawctl\x00', 0x800, 0x0)
sendmmsg$sock(r4, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f83628f5c2d49e1274aa788b1c46447b94ecace182245586a3b0f6006e16a22f71d8e946110d357e0aa9a540b00bb3704348943c8e6069c85b0910eed3ce478fc3dff6b70629103572db2e23e8c1f09a40abd77127b43e828d3adb0363d0444ca5e1ae78f47c27841b600c446a3eed39340cb39d6b6561fb79c6d8b84d3eda059167cb0b5897344b0655db89ca79a0866e8ab9147e8d6517821ac863b04c38bd6b3ef34ed17cc2a4504295a3388f1e8c54eb00c6f7da241807c7b5cd104c4879c7d9112bbec81b4a7b044757ce8fd02d159c", 0xd2}], 0x2, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0xda}}, @txtime={{0x18, 0x1, 0x3d, 0x3f}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff25}}], 0x48}}, {{&(0x7f00000001c0)=@nfc_llcp={0x27, 0x2, 0x2, 0x6, 0x3b, 0x8, "7269de5294df1c0f54539a56422341868e697cbeb642c806474f7d21724a35faf5ccc4d99331d2d19ffaf35646faba0e9a8425465754d855dbacba7d8b1b80", 0x1e}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001740)=[@mark={{0x14, 0x1, 0x24, 0x5b}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x20000}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0xa8}}, {{&(0x7f0000001800)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001880)="7122631171b2436551940405f966101a3919b7f5d4661fd52ce9dd1206f58ac87a7ed994389ee680c74487e2f1aebb87eeee2a0e9fc5fef7a3ab4c849976a76a183191207b27f0a411e97e01b677e8f2d1eb450e5e2f9c12c02a19cd96f7f610c01ce1751529ab4e3c49e1f70ac744964c05c719c7854da98c4a6dff37ef529b5f940110af7b5d2be4ae52c21a94dda6ba73527816e0bdcc211aeb29f964da026c2d04c6f0588e2c50de249ca816c1df8c7af91f34a105603a56e382ad15cc966c1ce82ddfda5ff7c25b26027050b35898d4ffb9a7564252fe3cdb804576bfe8ef3754d2e6c1b6d4a4", 0xe9}, {&(0x7f0000001980)="0bc9ff6cda89939a2409f4f289ed9e6e6fbdff070f08183082", 0x19}, {&(0x7f00000019c0)="01c0dc8d416b4272e044c9b9eed6c7f3e3f95838ceba25343f8d106df79a6a2b043517", 0x23}, {&(0x7f0000001a00)="de0d12e944cb5b9747ca2022cdbe1ab7ff14322bafc6445d116ab1", 0x1b}], 0x4, &(0x7f0000001a80)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}}, {{&(0x7f0000001b00)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)="b584c08618886a6025592b6b82d606aaff8b09d316b043ffcdefd4b396be59451ae79119c4de693278fa4b60702d7f4aa24e4b3541eaa2445bf87a64f2b6a01548437a9c1849ace3257fb98c7904ed48aaeb1bc577920594302db67b6fe193bdb35483848639219599d3e1db6fc2908148e79add9daad52ba80a21c32be82c2fa698bcb9fd1215194e08abe421e34d0a5493e7", 0x93}, {&(0x7f0000001c40)="14e54d15a14de025b89537933339baeefc6af5aad0c2e2d2e9f99dc8e91ce270df6ff3fec780c7bc3140d8600bad8d48477c7281093ef9d34f42c8f04394cefa5b79c15ffd918618977b301f8761", 0x4e}, {&(0x7f00000013c0)="49eb2c9f44862f583fe1cf3f1b52f59fba3db28083dc5126c8bd1cf734481da698794e2574cd2e042dd73c66b134d410594e4f68cb3181ceaa554c10a249bd1b5c305f1050db86626a2e99e94891add13a1ebd08aa8f0d404074bc1ce22d38fa63603c6d8f8d9e04dd5e2a3b85645cdff8e9ed998012c6ae799317ea53b4c92e6528313e65f7cc0d776b06179d1863e0db08eb4cf8bc2c8fb19b3410944177ad4258add0111cba157d0eca3564d0bff2a2934727df852743886037169422b7e5810136428027401c7af15e96a38a6d46953ff46377182425e83679492f92a259cfa747d1ad427d91d6c22e7a16778db521", 0xf1}, {&(0x7f0000001dc0)="2d48edc6d82f665eb351ce016b81da90805ccd3c983b0cadc9cc7a", 0x1b}], 0x4, &(0x7f0000001e40)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x78}}, {{&(0x7f0000001ec0)=@in6={0xa, 0x4e21, 0x400, @empty, 0x1}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001f40)="eb80e552e4c4ab2186e4eb0332fc43cad42da45085cecd13d0ccc6cd333afc2be07f25a10fafc04a326ff49d6bb513f332ba611fb1540ecebd055214581c571870ae", 0x42}, {&(0x7f0000001fc0)="0104f8c8fb55fde5d4245011285ffd20db7b829658d5544cbc263c773200e769527ee4bc083ad311c3c7bdcf5ec089674dae7ca218214dd4a0e4726fed737cfd8d27284b15afb8b1b162bbfdd0cf74e31cddab02e06821d0d23aa9a66dcfd156e6d968cd01d9c90bfd956fad376e7ee777288ca60429b1e93d1195f71b6c1773490166b44e81232770a51562742b6e4668b8c8e4037c5e76c8600447c0052357ea7eb5e71dde0ecee7354e87558a0882021b97a39d3a8bfb12555b57c1159339c97ac4aeaaa283909dc6c0bd1ba06db41c5f9c6a71118b48b92c9b09b6fce46cd7c46dce0d7f46500f8c", 0xea}, {&(0x7f00000020c0)="9c1dd557cd67e3abbd1a1138e318200af6c8d0e6281e280c54bae0899d25c3c6fa163f33bf1f55f85b654ec05b87ba3fc14845b1884cbcb416deffdbca667cebee1cca978a79471c45a8629f61cc9a2e89fc0ecca98e748c05bbcee66692ec03055ecfb156558d7446ee1ea87d6f3269d6e711fc80be860bcbb5198cffc95b42a1e065975e86aa26afa9da28b7abecbb02a3e3b7371a2f3a4b51916f64", 0x9d}, {&(0x7f0000002180)="5382ac9601e6e8b684c4a44fb0c29053d2c212d0d5ff5e24f7e0d58fed85ec7e3a4e52ea8cd7848e64afbb1164c6244a83051ff98fd1b9a9a356b943001c34872773468b977b3030843203ec6a0258f9284d3780976e6ef8", 0x58}, {&(0x7f0000002200)="63074fd843f104f2414eee4d155b9fbf6e56094df27210ef25", 0x19}, {&(0x7f0000002240)="6568d69c1e4cdc3d70aff148391a1161ad0a6b670acc88a5a819dedaea544503", 0x20}, {&(0x7f0000002280)="61918a30b45f8f461713c5591982814919fb06aae6a28dfdcc8ae2bce83cbab05d76929386fc4d3a501d9a6693c6a15dd725fed741f29fef5fd4aa1e51e2712bc242f98f979266f6c28d7e16175c6017723fc877fb5b290b33e47b1a8fe5f9c06da2e58609ac446af09233da32508820f275e2d44291d4500fd4bf4cfb976e3676060aae925fc7b6deef7bd8df", 0x8d}, {&(0x7f0000002340)}, {&(0x7f0000002380)="94f3bc4f90342c525ad95d5770ad518012fe93c86b7c478636d5e25b8d93cad9f837a09e9bbd48f14ccab253aca3a902cc7684676eb5ef497c", 0x39}], 0x9, &(0x7f0000002480)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x5f}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x5e18}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xf0}}], 0x5, 0x85)

19:32:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xcc03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  964.519753][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  964.597243][ T1359] bond52: (slave veth193): Enslaving as an active interface with an up link
19:32:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xde03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fsync(r1)
fallocate(r0, 0x3, 0x0, 0x3ff)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000240)="1148110e181af179ba3910cac3a5cf874aab90511a6695bbbb1d657f602a92455afc114bb3cc294deeaa86aedabd81ad5f425abd448d5cf909d7d3e7c73ce7e4f6920ab5815611c38455bc85a5cdd0a1a9cbb97ebeb2b51d4f18dca5cb2a961c3094e7d6b3b682b50c9c46fe14b5cc1cbe78005cc22afaa709440cede6d25f037b487bbd2501efe3e0931e120bf8cc610e0367c45532c7610638afda6ffce01428ae39368d4080145d5fef29325a8f399be43063db3b8f25aaefcd95805246089ab8dadea6322dfb3eabad", 0xcb)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000080)={0x5})
fallocate(r1, 0x1, 0x10000000000000, 0x0)

[  964.653345][ T1333] device bond52 entered promiscuous mode
[  964.661337][ T1333] device veth193 entered promiscuous mode
[  964.677230][ T1333] 8021q: adding VLAN 0 to HW filter on device bond52
19:32:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe002], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:07 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000040))
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
close_range(r5, r3, 0x2)
r6 = dup(r4)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x80000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'virt_wifi0\x00', 0x8000})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000002c0)=0xfffffffffffffe00, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x10000)
socket$inet_udplite(0x2, 0x2, 0x88)
open_by_handle_at(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="ad0000007f0000007af0d478096bf6bc276ddaae27f910813215ce0789875248745c0bab292b4b087edb6bd12cd2064306fe3c4fc2b066148c52da75522844c7f7dbb3f15d377b0b3ab184a539ec2823f2e54c4999f07f97f663edeb0cb8832ec0dfe21f1a4d575ce2a22423fd53e3a1ddd6fb37b70d7690bb3d9fba64f342c3eb87471569156451185ffe7b6ceb73297ec047d84b21a40f9d6708554440859dd98b74fbb974bd7dc3d860000000000000000000000029d789e10241080074a2f46f966bb6e2687714d968eb16"], 0x202)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  964.740535][ T1402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0xffffffffffff7fff)
syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x4, 0x40)
r1 = memfd_create(&(0x7f0000000240)='\xbbIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xaf\x18n\xcc\xe9\xe7!} \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]\x06\x00#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xc3$\x97\x94\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x84\x00\x00\x00\xd9\xf4\v\xf7\xac\xfd+\x8c\xbdK\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0xb)
fallocate(r1, 0x3, 0x0, 0x100007dff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x60, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x313}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x79}}]}, 0x60}}, 0x0)
fallocate(0xffffffffffffffff, 0x38, 0x0, 0x0)

19:32:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  965.043164][ T1433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  965.121825][ T1442] bond53: (slave veth195): Enslaving as an active interface with an up link
19:32:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe804], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  965.206572][ T1418] device bond53 entered promiscuous mode
[  965.212253][ T1418] device veth195 entered promiscuous mode
19:32:08 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = dup2(r3, r4)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r8}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @empty}, r8}}, 0x48)
write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r8, 0x7, "d59e0b", "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"}}, 0x110)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  965.268393][ T1418] 8021q: adding VLAN 0 to HW filter on device bond53
19:32:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000000)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xc0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\x805\xa9y\xcb\xe8*z-+K5\x04\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x0)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$nfc_llcp(r3, 0x118, 0x3, &(0x7f00000001c0)=""/237, 0xed)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x10000, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000180)=0x28)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r5, r6, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x100000, 0x3, &(0x7f00000002c0)="c8466bb9df58920f3e6d2496e4038e7642a73d834216370cc26990224c146cfec1", 0x1}, 0x8)
r8 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r8, 0x0, 0x0, 0x0)
setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f00000000c0)=0x6, 0x4)

19:32:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xf503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:08 executing program 4:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80080, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000100)={0x0, {0x800, 0x1}})
r1 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r1, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x40000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  965.642440][ T1500] __nla_validate_parse: 1 callbacks suppressed
[  965.642451][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x1000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:08 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x101000, 0x0)
getsockname$ax25(r0, &(0x7f0000000080)={{}, [@null, @netrom, @netrom, @netrom, @netrom, @default, @default, @netrom]}, &(0x7f0000000100)=0x48)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
r2 = gettid()
tkill(r2, 0x1000000000016)
syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_mr_cache\x00')
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  965.754201][ T1513] bond54: (slave veth197): Enslaving as an active interface with an up link
19:32:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  965.797086][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond52: link becomes ready
[  965.826077][ T1557] device bond54 entered promiscuous mode
[  965.832958][ T1557] device veth197 entered promiscuous mode
19:32:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_io_uring_setup(0x8c3, &(0x7f0000000080)={0x0, 0x1a67, 0x8, 0x2000, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2], 0x1}, 0x0)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockname$netrom(r7, &(0x7f00000002c0)={{0x3, @rose}, [@null, @rose, @rose, @remote, @remote, @netrom, @default, @null]}, &(0x7f0000000200)=0x48)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1404, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000)

[  965.864962][ T1557] 8021q: adding VLAN 0 to HW filter on device bond54
[  965.903856][ T1577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x2000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x6000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  966.062234][ T1587] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040))
openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0)
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3a030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  966.266966][ T1595] bond55: (slave veth199): Enslaving as an active interface with an up link
[  966.326461][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  966.354020][ T1635] device bond55 entered promiscuous mode
[  966.361422][ T1635] device veth199 entered promiscuous mode
19:32:09 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:09 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$TCFLSH(r5, 0x540b, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x6, 0x4, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @loopback}, 0x10, 0x1, 0x5, 0x5}})
r6 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_io_uring_setup(0x6de, &(0x7f0000000200)={0x0, 0x86cf, 0x20, 0x3, 0x356, 0x0, r6}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=<r7=>0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x9, 0x1f, 0x0, 0x7fffffff, 0x0, 0x0, {0x0, r10}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  966.503869][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  966.560967][ T1659] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  966.700273][ T1660] bond56: (slave veth201): Enslaving as an active interface with an up link
[  966.716581][ T1659] device bond56 entered promiscuous mode
[  966.726926][ T1659] device veth201 entered promiscuous mode
19:32:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xac\x8f\xde]\xe3O\xde\x1ae\v\b\xd2\xbes\xfea\xff\xac\xfdW\xac\xd6\xd4v\x03:\xffM\x17\xd9\xec\x1d@S.*\xcfS\xdf\v\xda\xf5\x13\xb9\xffrtZ\x9bn\x1e6fC\xf4\xd2\xe5vz\x86\xc8\r}K/#\x7f\xa4$\xaeE)w)\xd3-\xdaSy\xbaiU\x95\xa4\xc8\xcfu\a\xb0P2\x05\x05\x11BrY\xa2(\x8b\xaa\f\xf8\x03\x15\x8e~\x05\xac\xdd\x87%#\x15\xd4\\\xd5\xb9\x86\xf3\xe2T%\xe9#\xc2\xcd\xb0\xb8\x9c(Q\x96e\x8dFG\xe2\x9c\xe6\x10\x92>\xe6T3e\xa2\xfb\x8f\xe9\xf3Ao\xd4m5\xdf\x9d\x04\xf2ngE\x1b\x1f50c\xafkf\xbdj\xf3\xb8_SPyl\xe5\x8a\xfam\xd4\xf8\x88\xf3\xb3\xfc\xbc\x8c\xa6\x91\x97Z}\\\xa1 p\t\b?\xe9\x85\xe0\xa2z\x91\xa9\xf8r\x14\x84\xca2\xc5\xea_!I\xd5\x8f\x01\x96)H\x01.\xbe\x04\xd6\x87\xc6\x9e\xaag\xa1.\x9e8\x85\xe3\x1cVl\xc8[I3\xb3\x11', 0x5)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e24, 0x47163d5, @remote, 0x9}}, 0x9, 0x7}, &(0x7f00000000c0)=0x90)

19:32:11 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x3f000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:11 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r3, r4, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x5ec3, &(0x7f0000000100)={0x0, 0xc473, 0x8, 0x0, 0x2ad}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=<r6=>0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r7)
r8 = io_uring_setup(0x1, &(0x7f0000000040))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9)
syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r9}}, 0x81)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000300)={0x5635, 0x5, 0x3, {0x9, @pix={0x800, 0x401, 0x3447504d, 0x3, 0x8, 0xfffffffb, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2}}, 0x7b0})
connect$bt_rfcomm(r7, &(0x7f0000000400)={0x1f, @fixed={[], 0x12}, 0x3}, 0xa)

19:32:11 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfc, <r3=>0x0, 0x10001, 0xfffffffffffffff9})
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000100)={r3, 0x7})

19:32:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x40000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  968.897861][ T1734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  968.932669][ T1739] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xc5000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:12 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791128ffe400"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = socket$inet6(0xa, 0x7, 0x2)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140))
r5 = socket$inet6(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00')
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0f0000000000000000000800030000000000", @ANYRES32=r6, @ANYBLOB="0500290000000000"], 0x24}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c400448b624d2ab8ff9fe16eeb47273eb0053547ea5fa91119cb478edee0b50d606", @ANYRES16=r8, @ANYBLOB="00232cbd7000fb0000000008002b000300000000040b00d0fb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)

19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xcc030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  969.128722][ T1768] bond57: (slave veth203): Enslaving as an active interface with an up link
19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xde030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:12 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x76, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000140), 0xb}, 0x0, 0xfffffffffffffffd, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x84002, 0x0)
mq_unlink(&(0x7f00000000c0)='\x00')
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000080)=0x4f, 0x4)
r1 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7\xd9\xef\x83\xd9=>\xc6\x11\x94,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcatx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\xfc\xd8\xf0\xce\xcb\x152\'\xcf\x11\x10(L\xae\x16\xc2\xf9\x0f\xaa!\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfaC\xa7\xde\x8e\xd7\'\x9e\xb5.\xd1t\xed\xc4\x87r\xf1\x0e\xdc\x87\x12\xce\x1c\xc8\x1e\xca\xa4\xa8_\xfd1\'?\x14\xd2u\x8d\x9e\xde\x8db.\"\xb4H\xecp\x86\x8d\xb1d\xd3\xf7\xb9ka\xc5\xa2\x1f8^Z\x86\x110\xe5\x86\x8d,\x87R\t\x1e\xac\x98\xc37I8w\vi\xc6\x15\xd9\xc9\x19[\xc8!\xe4\xe9\x7f\xb8\xfc$JZ\x88\xde1\x80\x8c\xc5\xe34\xf2\x0f\xda', 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  969.184042][ T1798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  969.214787][ T1739] device bond57 entered promiscuous mode
[  969.220481][ T1739] device veth203 entered promiscuous mode
19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe0020000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:12 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000002c0)='%@@6\x89l\xb4\xae\x00\x00\x00\x00\xf8\x87\x90\xa43.\x1c\xb4m\xc9:\xf6\xc1@\xae\xd7\xb3J{-\xcc\x14\xe7&^\x01\xed\x15\xba\xb724\xce\xb6\xbc<\x93\x99\'\xd5T+F\x86\x00\x00\x00\x00\x00', 0x0, 0xffffffffffffffff)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0x18)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001980)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x58}, 0x1, 0xa00000000000000}, 0x4801)
sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000600)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x30044044)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}}}, 0x84)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  969.405343][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
r2 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r2, 0x3, 0x0, 0x100007dff)
close_range(r1, r2, 0x2)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:12 executing program 4:
r0 = syz_io_uring_setup(0x1b4e, &(0x7f0000000080)={0x0, 0x5e01, 0x0, 0x0, 0x4}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000380)=0x4)
r5 = socket$inet(0x2, 0x80001, 0x84)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept4$vsock_stream(r7, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x100007dff)
r8 = signalfd(0xffffffffffffffff, &(0x7f0000000540)={[0x6]}, 0x8)
ioctl$PPPOEIOCSFWD(r8, 0x4008b100, &(0x7f0000000480)={0x18, 0x0, {0x3, @empty, 'virt_wifi0\x00'}})
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x2000, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000003c0)=0x18)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000000100)=0x84)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  969.514347][ T1856] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:12 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000100)={0x3, 0x1, @raw_data=[0x6fb1, 0x100, 0x7f, 0x2, 0x0, 0x5, 0x5, 0xb3c, 0x8d6b, 0x8a, 0x101, 0x3f, 0x9, 0xedd7, 0xffff, 0x9]})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xe8040000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:12 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:12 executing program 5:
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9\xb6=\x1a\xe0dH\xbd\x9bY\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x1)
fallocate(r0, 0x3, 0x0, 0x100007dff)
creat(&(0x7f0000000000)='./file0\x00', 0xb8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:12 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  969.839149][ T1865] bond58: (slave veth205): Enslaving as an active interface with an up link
[  969.891141][ T1905] device bond58 entered promiscuous mode
[  969.906332][ T1905] device veth205 entered promiscuous mode
[  969.930009][ T1939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xf5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x100, 0x8, [0x4, 0x800, 0x44, 0x101, 0xfc01, 0x9, 0x3ff, 0x1f]}, &(0x7f0000000240)=0x18)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6)
keyctl$clear(0x7, r6)
keyctl$read(0xb, r6, &(0x7f0000000000)=""/136, 0x88)
keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffff8)

19:32:13 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1)
ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x6)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8a, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  970.148794][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  970.188483][ T1961] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:13 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
r5 = signalfd4(r1, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x8, 0x800)
signalfd4(r5, &(0x7f0000000100)={[0x9]}, 0x8, 0x80000)
r6 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r6, 0x3, 0x0, 0x100007dff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r7)
r8 = io_uring_setup(0x1, &(0x7f0000000040))
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r9)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x401, 0x3, &(0x7f0000000240)="fd4901019741d8d6", 0xb0, 0x0, 0x1, {0x3, r9}}, 0x1)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f000000000000000000000088", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$char_usb(r2, &(0x7f0000000000)=""/199, 0xc7)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000240)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x85\xcf\x88cP\x10\\\xf7Tx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc4\xc4EZ;\x0fP\xc5\'\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x03\x00\x00\x00\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa\xd0\xb6R@\x11\xfb\xaa\x13\xc8|\xf4\xcb{f\x99cc\xa9\xb0\xbd\xacOt\x04~\x8cL\xb7\xdfN\xf4\x02\xc9\xe4\x8eN\x1d\xf8Q\b\xb9\x8c.\xe1\xc2\xed\x1e\xdb\xfd)e\xf8N\xf6}\xaf$\x8eK\xbeI\xcd\xc4\xc6\xf1g>\xb3\x97\xe4x`>(N>\xe0#\xd2\xf1;\x04\x18\x02\xd0;\x04\xb0\x9f#\x81\xf3\x11M\xf1\xd6\x8c\xbe\xd3aU\xfb\xa3PZ\\\x9f\xda6\xe2\xc8j\x83\x86yy\xefOBL[\x9aV\xfan\x13\x87\x06&Z\x14\xffc:Z\x97Ud\xc6\xdaI\xcf\v\x05z@\x89+\x00\x00', 0x6)
fallocate(r3, 0x3, 0x0, 0x100007dff)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)

19:32:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x2], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:13 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x20000000000, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x4], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  970.424741][ T1969] bond59: (slave veth207): Enslaving as an active interface with an up link
[  970.479370][ T2014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  970.497351][ T2011] device bond59 entered promiscuous mode
[  970.505054][ T2011] device veth207 entered promiscuous mode
19:32:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x6], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  970.647272][ T2050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  970.673537][ T2054] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:13 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000007f", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  970.866283][ T2057] bond60: (slave veth209): Enslaving as an active interface with an up link
19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xc5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  970.919045][ T2092] device bond60 entered promiscuous mode
[  970.934695][ T2092] device veth209 entered promiscuous mode
[  970.964808][ T2099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x2e0], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00000000000000000000009e", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  971.127996][ T2105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  971.173459][ T2108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x1, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa'], &(0x7f00000003c0)=[&(0x7f0000000280)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', &(0x7f0000000400)='*\x00', &(0x7f0000000380)='%j\xae!{\xf3.\\%$\x00'], 0x1000)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000000))

19:32:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000f0", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x33a], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  971.352533][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000fc", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3cc], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  971.463321][  T645] IPv6: ADDRCONF(NETDEV_CHANGE): bond59: link becomes ready
[  971.522246][ T2131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  971.547607][ T2133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3de], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  971.726069][ T2149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f0000000000000000000000ff", @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:14 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3e5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:15 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040))
socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r5)
r6 = io_uring_setup(0x1, &(0x7f0000000040))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r8, r9, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r11=>0x0, &(0x7f0000000040))
socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r11, r1, &(0x7f0000001400)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x141, 0x1, {0x13, r7}}, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  971.898484][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  971.932279][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3f5], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x4e8], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x2f7}, 0x8)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
accept4$vsock_stream(r1, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400002, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)={0x92f, 0x2, 0x4, 0x10, 0x7f, {}, {0x4, 0x1, 0x80, 0x0, 0x4, 0x40, "e8f2f5ce"}, 0x9, 0x1, @offset=0xfff, 0x3})
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0717000000000000000016000000140001800d0001107564703a73797a3000000000"], 0x28}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0xcc, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf3}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x353}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5f0579461a21335d754c248385b0fe2d6d1dfac7f24b675b764ee9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r5, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x600], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  972.324994][ T2214] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:15 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x3c3, 0x2, 0x80000000, 0x53aa969b})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  972.387554][ T2214] bond61 (uninitialized): Released all slaves
19:32:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:15 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3a03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  972.764514][ T2253] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:15 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f0000000040)=0x80, &(0x7f00000002c0)=@can, 0x0, 0x80000}, 0x0)
r5 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
listen(r6, 0x10001)
accept(r6, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
fallocate(r5, 0x3, 0x0, 0x100007dff)
r10 = syz_usb_connect(0x3f29ba89fa44c129, 0x936, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x17, 0x18, 0x8, 0x20, 0xbb4, 0xa74, 0x38, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x924, 0x3, 0xb4, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x6, 0xf3, 0x64, 0xcb, 0x0, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "f5749f58"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3f, 0xfff8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x8, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x6}, @dmm={0x7, 0x24, 0x14, 0xfffe, 0x80}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x5}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "34efe34ffb"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x800, 0x9c7a}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x5, 0x9, 0x9, 0x3f, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0xbe, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x5, 0x9, 0xa8, 0x9, 0x7f}]}], [{{0x9, 0x5, 0x8, 0x2, 0x8, 0x8, 0x2a, 0x1, [@generic={0x3, 0x10, 'L'}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x826a}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x90, 0x3, 0x8}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xae, 0x7f, 0x9, [@generic={0x2a, 0x22, "ad8a77dbd49cad2f596e15c5e645ae9824f2885da9b7173de270bb524cb91751e4edf1e4b1d54f66"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x220, 0x9, 0x1, 0x1f}}, {{0x9, 0x5, 0x1b, 0x7, 0x10, 0x9, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6b, 0x400}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x25, 0x0, 0x9, [@generic={0xfb, 0x22, "bb3acd2cbff6a275757f638d17dd2b47a281d7fa3fbd4817a7323c8492228e97e07f6f8cb6785cbc934d7283e7d5e75a4bb9a4f09eb434f74bb93634078fa0644bb948997a2a9b8fb29583fcc21e27e3e96186a65757a67d54d81a6db34ba9ade0c01fd885f48925fb4c3be91ed969fd57b4a23698f3257e5ce4b2685af6553d35c693ffcc4a142f592c0afe5e759ad7a614a721ad01fb11fd07ea18093baa6e80f8abd65d5a5791b9ff5ec556279cb3d90a8132ed38d563e5ac72481b32c7dee03c93628932ed789ed31bfb2536e38325f044550d24d32b5cbfeb9e3199518b9bbb2e15027f2512905c4f1434fdc185f7ca7c5f9939262893"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x200}]}}]}}, {{0x9, 0x4, 0xcf, 0xa3, 0xe, 0x89, 0xa2, 0x85, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x992, 0xf8}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x2, 0x6, [0x7, 0x7, 0x7, 0x2, 0x4, 0x5], 0x7}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x4}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x3f, "ae0f4179"}]}], [{{0x9, 0x5, 0xa, 0x1, 0x400, 0x5, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x9, 0x3f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x781}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x6, 0x2, 0x3f}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x9, 0x20, 0x80}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x4, 0x0, 0x1, [@generic={0xec, 0x1, "0f0d9d676fe481053ca1ae23240b841bd00db1bcedd4f66dc828931b3104c745c4d6f5c4a3120c8881d1daa922973c286ab51ae36c5c5b1d0e9ce7c986e3f556c3011b6820131da3136a146fd3cad2bbc5c145200894d54dc47570dc68f6505378d56dcd8661a4dd6ccbb56bbf783c34d7be665185bbf62316050dc78f7fb8754c139b095c720a52efc50d63abc03dd23a663326018c8181fed15e540768592c8d14b145bd2d96a9f39c05964afe59466d4d6d997c405805ae4af405673cfa212fffe8a147bf1585ee56a96b062362dacb9ed8698cb032dbda69a78fab9e11fb4e2584e2ad669bbbbe79"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xe8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x20, 0x51, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4a, 0x7fff}]}}, {{0x9, 0x5, 0x5, 0xa, 0x40, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x69d0306e91918f7a, 0xff, 0x7f, 0x3f, 0x2, [@generic={0xde, 0x4, "230cb09cc3fa8e811e7053528f340fe1cb4f206ec6d0abc5f9d6bdb8f1c8d571a2e948ffb7952000584f293e6510589a3bd315ba526d55b52ec0ba845f119aebc1b475bbdebbd18c5d807c35d0705e1d1e798a0f2291fb98d5871898698b967bd1f1ef4a1a4fdb6334388928bb00cf90b6bd420d6ff792d6d90eec131a074d53c1931e8ed85fe861f40a8ffc424850800f120736099e63af0603c32f9196f074d6a7eabc50880105ca32488b00ede66642cdefacf2ed2f99b2920e987cc51cb4290b36c0ece86777492bce9e310062c002132af2468ff13d1c136010"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x3f, 0x4, 0xff}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x1, 0xff, 0x80, [@generic={0x1d, 0x31, "8b79ab61f7aedd68a9177ab960effd8cbfc545c1ed4d35f6b9b019"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x97, 0x3, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x3, 0xf3, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x3, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x2, 0x4, 0x40, [@generic={0x20, 0x10, "95ad9060c898103931e075416aab300bd1f0e68bdfc225873e07932ffa78"}, @generic={0xd1, 0x23, "796962b903e62731e73bf19103fea574a8df85a18f77ec79ee40654235475c82237904b42d9f8c4ca4548ab71ac7417b006f335478d8f9a85a1ad95a6a2a5f4e17551fe2f832985f2eebfb40bcf6127463df6be09f1549cf7a68cd9de9f8f148313796e7186addd2c6edf3fbbad604ae849068a08cd227db289b1a4012018919659c30f3af98bbb0552343ed302535517bcfbe9782d0d87aa4a06b552ca4b539ce64f989c7ecfba885eaabb885d054ef1b5518f93f23446920a19dfbbe8ea66cb6a090ff2954ce09d24422c3c9adc7"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x52, 0xf, "2bfb715180ac43e511472752efe70cebf20a5440c1774e3af1538f357bd74ec0408d64c40a536791871a448f896d5ec591f18b4ce9551aa47061e8dc86113a51f8ec4d8bdc5fad9d033fb22cdd7ad2af"}]}}]}}, {{0x9, 0x4, 0x6, 0xff, 0x8, 0xf2, 0x7c, 0xc0, 0x0, [@generic={0x5d, 0xc, "1be7fa956889c608027a911c8256021ff9faac28be2b00f57437923a1167114cd12155da3daf0adbbebc2341951d3b91eea04ce654ce5f622ad4328ad11d4c6036bcec888feb81fe2af95845da3d9a18b3e7efb7f2ea4d8111c4aa"}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x8, 0x3, "0c6ab661be39"}]}], [{{0x9, 0x5, 0xf, 0x4, 0x8, 0x1f, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x200}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0xf9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x80, 0x30, 0x20, 0xb9, 0x4d, 0x1, [@generic={0xec, 0x9, "77d68120d76d6a2a9a40530c8c8e18674ea08e76bb5ed26c101085092fd8993d2e8506f649433e0f5d980b405cf093f036137be99fb7cb802103d8b458c6e979d158867d75c15d653164dabe97eb1bc016ed37dd0e5bf18e8f2478c6d8b9afb346381a5a4700bc3c1a3f701ba648cdb3c739d4d522fe1af24ccc49a3273ab4baaa4121c93c1aa623d6a9f068233c4c94bbdec55135826f5a4c701f38d0cbbf293bef406ac7426c806ac100da6b827eef295bffc5e630097e8ad68b261f2437e5501483a08a2b19d728418010b0e174c9ab72b69f250470dff6f35830b6e73198de3d14bc88635fdf57c9"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x27, 0x20, [@generic={0x8b, 0x3, "6e6d624acad8374392bfb86b923afe229c66d774c1b81048a5b8cb23ca99e2a0534ed8270e8e0cc726285686fb7afc1c7e6331d34dd72322d1ae04eea8a5d14dfbb508fb6fcd42b1acdfecc5586f21c9f699319c87accbb66766249f0382a69a452e798b8e59669fa7d893d05d9e4838ffcf7b44f52fe6e5fd8b17f1a6a4f8c2338ee79bb5da5053ab"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0xff, 0x44}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x33, 0x5, 0x0, [@generic={0x30, 0x22, "b24cb8034787ac3fe4ebbf7fc72f397032944e31d64e916093e2996dc4e5ade5b6cf7eb666c1c339cdf62573ef4d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa4, 0x1f}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf0}, @generic={0x7e, 0xf, "10667e26f22568203395af204f3e3af85414f9fe9885546b9eac9831d4e5400062ce89899ce4896d89e82665a7fb986b8307701a31d7b69bfc65f8089a3dc47490c2ff2b7638f4eb4dcc19b50feb967a6e18ac34b663f9647a2613ab6eca64f1821d62faf7f579f743ce6577f6560ba57e21d642bca7bbd687608270"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x80, 0x5d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xcef5}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0x20, 0x5, 0xff, 0xff}, 0x48, &(0x7f0000000c80)={0x5, 0xf, 0x48, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x5, 0x88, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "5dc82d57bde1d68db163cafcb02adcea"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x7ff0000, 0xf00f, 0xff00, [0xc0, 0x3f00, 0x3fc0, 0x3f3f, 0xc00f, 0xc0]}]}, 0x2, [{0x102, &(0x7f0000000d00)=@string={0x102, 0x3, "d81da515a1a1b0665d22b037110deb3a1d2869d5d6d25795d04ade43bdc57250f9fa2567dd125f6877fae998bf72a71345b5779a87aae614497df221fb447bd129320e66f70aeabaabfa773cfd48fb7e0a3afb411a67dce85121b034dafa6c3877c88a5c6c3ff141100928a3aa47f2ccba1424d2b61c95de67f639ca40abd0f4029d0afccd93cc86808163417a4562d6cd3dcccc9b34a4d13d7553eb6b4a9ba92fb109fe7b399be8a7e2b4cc71f907914cc421131c87b80e1b53189b5d87718f4b7386093a5e099ce72c70ccdcd2fb7fbc34428458c6af52d451d27f8e60e1ca92f8edac02dcffb73a6de274379be6f7261f65c4bfe2a53234d3f5a6bd7bffae"}}, {0x4e, &(0x7f0000000e40)=@string={0x4e, 0x3, "2ed7b4b0e2496642c8520f755344b9c00f6b1458df4012320903653261f6ce4ccc29623b4f6cb485796d2e26805ba7d8113da0686507ed1f120136ad49840f0c5e70150f5ab58b9999310087"}}]})
syz_usb_control_io(r10, &(0x7f0000001080)={0x2c, &(0x7f0000000ec0)={0x0, 0xc, 0xb2, {0xb2, 0x6, "1ed5d86ccc2a26f9f1e96e5f53a8b8159ab588848967423e49d6cbacb053d22c2cc61be89516d6a5c642c94d56c383aa5667c00f8c8c8aea5d0b22010c707b759a3bbf9f189cbb81cfa13e009ffabe28227ccdfcbf049c0d212ccf742aefac26228a3649ac2e25a947e9f2e7f942367f53fcec6d004272bb83e877d15848e98b00652f5460b69f4d82aa6b4b9e7b0e11e2998eac51d5a16be601d030ee8110f3eee0982be8e550098af3e4a73f9e27dd"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000fc0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x10001, 0xf0f, 0x1f, [0xc000, 0xffc000, 0x0]}, @ptm_cap={0x3}, @generic={0x5, 0x10, 0xb, "94e4"}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x7, 0x20, "377c972b", "2d6d3d16"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3f, 0x10, 0x8, 0x1f, 0xe, 0x8, 0x9}}}, &(0x7f0000001540)={0x84, &(0x7f00000010c0)={0x40, 0xb, 0x9c, "e8a607a10b476cbd900117a8f13a4def5bca0e777767851b95616d0e0cc82d3fb8691e9b2f3e137edd3f1f14b1a268f0e9f3bae6ea964d334de6c872ee81a6b336c84a4d9f9615b62734090091d6098ab9cc45147a50840c8d1b347654348a6edde008627cb3a3230f7599a7473bfeec66126474f3b3253017643d9104dc81509d56d9edd41de7e5d2fd3225b9acebcd7264f13dc16b58640108d322"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001200)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000001240)={0x20, 0x0, 0x8, {0x800, 0x2, [0xf0]}}, &(0x7f0000001280)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000012c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001300)={0x40, 0xb, 0x2, "3cbe"}, &(0x7f0000001340)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000001380)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000013c0)={0x40, 0x17, 0x6, @dev={[], 0x30}}, &(0x7f0000001400)={0x40, 0x19, 0x2, "1733"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001480)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000014c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001500)={0x40, 0x21, 0x1, 0x3}})
ftruncate(r5, 0x7)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x54000, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x20})
getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={<r5=>0xffffffffffffffff, 0x20, 0x1, 0x79})
ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000140))

19:32:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3f00], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  972.812686][ T2253] bond61 (uninitialized): Released all slaves
19:32:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x4000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:16 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={r3, 0xab, "f49f6b984b09b5c314f31723a036b08521208b2ecf6b29e1b688a755884b5109088a68771a8f48824028553b3fe5c6bda10364029e26ccefad957c2f2b4534fa0aa0508e8a4d736c3947f8e3bfbba09f94729f645a1860bb79954bfe04f9da07265b722f2e3363ddb45aecd60c9395a3f1dcbc27e032c362efa515b604614f48e018b146cb15907cdfb24ea1834c7f436566466647bfc1794b94e5c3923e1165500a5b00993233895e3aa4"}, &(0x7f0000000100)=0xb3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xc500], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  973.210978][ T2287] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x1, 0x100000000, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  973.342373][ T2287] bond61 (uninitialized): Released all slaves
19:32:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xcc03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:16 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000000)={0x2, 0x1e2, 0x5})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000040)="f75bfef3d8d58078ca0a160f4f30740640a54626e7e5e31b40c8926d17b1e57012a1f92745cd874eede12d6bbaadf45786ee49a7febe240e0e72087ce6be665615f2b25d14c6d27d401981b14e4fc0", &(0x7f00000000c0)=""/179}, 0x20)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x5a, 0x8}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r5, &(0x7f00000002c0)="658927186b4b837bfe465e3775b21b88148e17fe8c5e7bc694c94a3bc9a3a3043664d579af3b29bb6f6ad56ec32d2227154fa6cf51878e1cfacd62729fd408348af120eca7ff5e7e5663724998bb9ea336599a51ff2d119851ba81cb9684620dee32d2ddb6e2712ae165599c0314050c3ec8504f75da77755c77dbb8ea734734e7f70323adbaab0e66021a42ce1a1d15af261a65e6058df4711d2de45d066b09364e2c0556ab44ab8a95c93e08e2a17376877e863cb4988df7608a89b66fde22b84d005c9b9f6e0f393648e375c43516669adbdf80009d", &(0x7f00000003c0)=""/4096}, 0x20)

19:32:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xde03], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe002], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VT_RELDISP(r3, 0x5605)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x402, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
r6 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r6, 0x3, 0x0, 0x100007dff)
r7 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r7, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000140)=[r6, r7], 0x2, 0x0, 0x0, {0x0, r5}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1d)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$DRM_IOCTL_IRQ_BUSID(r9, 0xc0106403, &(0x7f0000000040)={0x7, 0x2, 0x2, 0x5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44081}, 0x4000001)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe804], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(r0, 0x5d, 0x0, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0)
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/114, 0x72)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040))

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xf503], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:17 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:17 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140c, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048e0}, 0x20000080)

19:32:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000000)={0x92b9, 0x14, [{0x4}, {0x4}, {0xe}, {0xf, 0x1}, {0xe}, {0x4}, {0xd, 0x1}, {0x1}, {0x8, 0x1}, {0xc}, {0x8, 0x1}, {0x9}, {0x0, 0x1}, {0x8, 0x1}, {0x6}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x4, 0x1}]})
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x40000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ttyprintk\x00', 0x480001, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r5, 0x6, 0x7, [0x81, 0x2965, 0x4, 0x0, 0x8, 0x9, 0x9]}, &(0x7f0000000140)=0x16)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00')
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x800)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc110000", @ANYRES16=r6, @ANYBLOB="000325bd7000fbdbdf250000000008000700010001009c1108806800008008000a000100000024000200a101a8a0534e933c05b8cd29ed882fb6c10d34b27fd059eab973e38ffdd45e2608000a000100000006000500090000000800030001000000200004000a004e2300000009fe8000000000000000000000000000300100000024000080200004000a004e22000000090000000000000000000000000000000080000000980c00801400040002004e24ffffffff0000000000000000e802098004000080a0000080060001000a00000014000200fc00000000000000000000000000000105000300000000000600010002000000080002000000000005000300030000000600010002000000080002007f0000010500030002000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200ac1414aa05000300010000000600010002000000080002000a010102050003000300000088000080060001000200000008000200ffffffff0500030002000000060001000a00000014000200fe8000000000000000000000000000120500030001000000060001000200000008000200000000000500030003000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000c4000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ac1414bb05000300010000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414aa0500030003000000f4000080060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f0000010500030003000000060001000a00000014000200fc0100000000000000000000000000000500030001000000060001000200000008000200ac14143f0500030001000000060001000a00000014000200fe8000000000000000000000000000160500030002000000060001000200000008000200640101000500030000000000060001000200000008000200ac1414aa05000300000000001400040002004e24ac1414aa00000000000000009002098094000080060001000200000008000200e00000010500030003000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000200000008000200ac1e00010500030000000000060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000200000008000200ac1414bb050003000000000094000080060001000200000008000200ac14142b0500030003000000060001000200000008000200ffffffff0500030002000000060001000200000008000200ac1e00010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200e00000010500030003000000060001000200000008000200ac1e00010500030001000000dc000080060001000a00000014000200200100000000000000000000000000000500030003000000060001000200000008000200ffffffff0500030001000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030001000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc0100000000000000000000000000000500030000000000ac060980240100800600010002000000080002000a0101000500030003000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200e00000020500030002000000060001000a00000014000200fe8000000000000000000000000000bb0500030003000000060001000200000008000200ffffffff05000300020000000600010002000000080002007f0000010500030000000000060001000a00000014000200ff01000000000000000000000000000105000300020000000600010002000000080002007f00000105000300000000000600010002000000080002007f000001050003000200000018010080060001000a00000014000200200100000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac1414aa0500030001000000060001000a0000001400020000000000000000000000ffff640101020500030003000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200640101010500030000000000060001000200000008000200000000000500030002000000060001000a000000140002002001000000000000000000000000000005000300000000000600010002000000080002000a01010205000300010000007c000080060001000200000008000200ffffffff05000300020000000600010002000000080002007f0000010500030003000000060001000200000008000200ac1414aa050003000100000006000100020000000800020064010100050003000000000006000100020000000800020000000000050003000300000030010080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200ac1e00010500030003000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200640101000500030002000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030003000000060001000a00000014000200fe8800000000000000000000000001010500030001000000060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200ff010000000000000000000000000001050003000300000088000080060001000200000008000200ffffffff0500030080000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030002000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000200000008000200e0000002050003000200000088000080060001000a0000001400020000000000000000000000ffff7f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ffffffff0500030002000000e8000080060001000200000008000200640101010500030000000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200640101020500030000000000060001000a00000014000200fc0200000000000000000000000000000500030001000000060001000200000008000200ac1414aa050003000100000006000100020000000200000034000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200e0000001050003000200000094000080060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000a000000140002000000000000000000000000000000000005000300030000000600010002000000080002007f0000010500030002000000060001000200000008000200ac1414380500030000000000060001000200000008000200ac1e0101050003000200000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff2400020070a923e74600859e7c143211a972aac51fdf670682cd94297e46065737481990100400802c00098028000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000200004000a004e230000ab9efe8000000000000000000000000000bb01040000b803098040000080060001000200000008000200e00000010500030003000000060001000a000000140002000000000000000000000000000000000105000300000000001c000080060001000200000008000200ac1e010105000300020000007c000080060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030000000000b8000080060001000200000008000200640101020500030003000000060001000a00000014000200fc00000000000000000000000000000005000300010000000600010002000000080002000a0101000500030001000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000200000008000200ac14141d050003000200000028000080060001000a0000001400020000000000000000000000ffff640101020500030002000000b8000080060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200e00000020500030000000000060001000a00000014000200fc01000000000000000000000000000005000300030000000600010002000000080002007f0000010500030000000000060001000200000008000200e000000105000300010000007c000080060001000200000008000200000000000500030002000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000200000008000200e00000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030003000000a0000080060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200000000000500030002000000060001000200000008000200ac1e01010500030001f71a89d50b9ed836000000060001000a00000014000200ff010000000000000000000000000001050003000100000028000080060001000a00000014000200fc020000000000000000000000000001050003000200000006000500010000006400008006000500ff0f00001400040002004e24ac1414440000000000000000200004000a004e20373549ce200100000000000000000000000000020500000024000200d13112157d86117b0942de4af2ed9562f0a210ee3dac4ebf247f3409edfad35d140002007767300000000000000000000000000008000500000000000800050000000000080005000000000008000500000000000800070004000000060006004e240000"], 0x11fc}, 0x1, 0x0, 0x0, 0x5}, 0x8041)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000001440)={0x87, 0x1e, [], [@generic={0x86, 0xf1, "b5484d34a737ec0ffbd9c0015ad971c7565d9f1d7ab8302b33494a35069db0179712dbc77067845aec19d45ecf04df1c58c170fb3660157682110b06550bcf81b6a61aa6f911667e480188101f286134dbe1fd97b2490f002e31e942aabc66ac08b0d6ff939214579e3b80b5b041936e46e16d39f28a78e9f6dc308f93f684a164f4b7b3cc7548d3dda162053d474f1ba5fcb83a0c49aca5d471a0f3f893938ade975274db154b3b18aec136a63518b8571b310df7d877049fc52a22020776b8b53def0fcbc17d75f1f03e80ef732b976d9e6528b7931160ed8dbfad476d641a15e4014f682b8ac946af05a06b2e2f1315"}]}, 0x100)

19:32:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:18 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x4)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev, 0x10}}}, 0x30)
setresgid(0x0, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\x10\x01\x00t\t-\x81E\xb67\x92^\xd4\x81E\xb3-1\xa6)\x99+/\xdf\x80\x00\x00\x00Hc\x9ag\x8f\xa3\xae\x0e\xad\x8d\xcc\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f00000005c0)=[{&(0x7f0000000340)="8d57ec69b731336d9882498fea0c29850eaff25b88f1c9ec5e797da56cccad89735ef0d5eddb9269c88b2caa3f936c2eae27b17fd2f6a6ec5e12e5558673893f2866fff45c4cdfef85f0ecaed01057ab9f5f946e3be262995c39244273937550d8730f4c5caa422ead8bebda8548682ea79a3b4a4568c199443082f54a54e05150bd97fbeeed936f6d017d64a28213", 0x8f}, {&(0x7f0000000400)="3db6189eda170a92fab0b0952f922b1e28a16dd7b5a0a26cb99e736cd175568be4558cf1a6c08999372517978a6640c72ea6dc58986d9e59e8a9baa2f367fa3525209deec9ba1fb31b90f23e5b5e11368d2315d7d38a257b546afc7a337c4323fd54a2f27ba86dcdc9a8243157bac7481060e98b9ae73519927dc3561acea6da3282a29b70e916f9", 0x88}, {0x0}, {&(0x7f00000004c0)="2c8caa02362082d40cea43ad87bdfeae1544438466727d60d19631fea372fc6d5d1b66a82d1801b751406cf8e71f87d4c542429b3bcdef870b6c5d239771263bdcfd1d817b6c0ecdec2e95dc8772a636b2330596b7d29be878915317662a585cf1c789c32976d111114128e558a51fea8ab676fd4ade125a21782cb72b95f038e262b73be6dc702c06428da9ee2fba1144ebb229e9a26f0aef1882ebaa1e85e00af528b72fb213a6b37200014fca963294502f5c8ddf7212d530d4ecc2434b394180511ce33afe9744", 0xc9}, {&(0x7f0000000700)="9ad1c3b5ef2ef3a58672336927f4650f174708e1d00dc0eec56c79253d638306abab810d64edc9da7cb8", 0x2a}, {&(0x7f00000001c0)}], 0x6, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000240)={0x10, 0x5, 0x9})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x0, @multicast1}, 0x0, 0x80000)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3014bc4394d000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x170, 0x24000001}, {&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)="1186470ce4fd503657cbb73fbbbe324f1c163213bdf2fa3942af79da5cba109f5f2fb74729d747a9307e3bf4d120aa20c6ac53833caf2338c1dda1e872f2d97b2d403e3d68ad17ed9fe39ff1eff72d818c3e53ca1e1c9314e8dfbf4046741842e94ca2f76bed975436e51d58b491c7c12d58b29bc69847d58b5d308deedf091f76b3d8dc09aad80ef2024053a6364bb839b7c8936291bbd5841513b48046de1f79513af2d731b78334a022204b5e6a4d401f89553a7d4937e29e019e15", 0xbd}, {&(0x7f0000000c80)="71f4f25d6598a498e8ab0494054529449ddfac55a5d64c3f307db045d37a86d20f5f5dccb24f7c7e27185630971daee9e6c3368b12d631383a8e03acf3fb0448c78964e56c04093b6dda0953b1c5de80438a8a89", 0x54}], 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}], 0x2, 0x40000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"})
r6 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r6, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x1000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = gettid()
tkill(r1, 0x1000000000016)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000240)=0x2000)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x0, r4)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
write$P9_RMKNOD(r3, &(0x7f0000000300)={0x14, 0x13, 0x2, {0x2, 0x2, 0x5}}, 0x14)
timer_getoverrun(r5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x6, 0x3, 0x9, 0x0, 0x0, 0x40600, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x10040, 0x5, 0x0, 0x8, 0x5e, 0x1d, 0x81}, r1, 0x1, 0xffffffffffffffff, 0x13)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000002c0)={0x401, 0x2, 0x2})
syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2)

[  975.332018][ T2436] Dev loop0: unable to read RDB block 1
[  975.346941][ T2436]  loop0: unable to read partition table
19:32:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  975.405190][ T2436] loop0: partition table beyond EOD, truncated
[  975.436686][ T3903] Dev loop0: unable to read RDB block 1
[  975.442941][ T2436] loop_reread_partitions: partition scan of loop0 (°Jƒpf”§QTÆ)÷[q©Z�;(’qÆ­²-M) failed (rc=-5)
19:32:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x2000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  975.471119][ T3903]  loop0: unable to read partition table
[  975.496111][ T3903] loop0: partition table beyond EOD, truncated
19:32:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:18 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:18 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x6000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  975.687813][ T2472] __nla_validate_parse: 16 callbacks suppressed
[  975.687823][ T2472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:18 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3a030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  975.965102][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x3f000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  976.042024][ T2501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  976.155442][ T2517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x4410}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0x40000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:21 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r3)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffffffff, 0x0, &(0x7f0000000240)="0e1a7fcf772e3fec3443da06569819d36f6ba3268171e02a912a9b9f8dd1e16ed4f8f7f704f59338af8ee16ebb7d116b0ad29e046f0bcacd8c713d2616b99ca435fcb400d510dbe4ca3f3b33b712a2c863f9e3305fa2dd05cfe8f5d26ce6e23dd6757f9a14", 0xbff, 0x0, 0x1, {0x3, r5}}, 0x1)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:21 executing program 4:
syz_io_uring_setup(0x1b43, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000180)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000040)={0x52, 0xfffd, 0x2, {0x2c3, 0x2}, {0xcce, 0x1ff}, @cond=[{0x8000, 0x101, 0x2, 0x7, 0x8, 0xc47f}, {0x3, 0x2, 0x5, 0x1, 0x7f, 0x1000}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000200)={0x0, <r9=>0x0, 0x5})
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
r11 = dup(r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000002c0)={r9, 0x0, r11})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000100)={0x80000000, 0xffffff01, 0x7ff})
io_uring_enter(0xffffffffffffffff, 0x4510, 0x0, 0x3, 0x0, 0xffffffffffffffd1)

19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xc5000000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  978.415486][ T2529] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  978.454009][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0xffffffffffffffff, 0x100007dff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f0000000040))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)

19:32:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xcc030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:21 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)

19:32:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  978.673117][ T2577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xde030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe0020000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  978.791365][ T2587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\'\x93\x19\x04\xe6\xea\x1au\x17\x16\xa5>\xd3\xc00){\x95\x06_bT\xe7,\x03\x98h\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn\xff\x016Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfch\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\xe0\x98\xcc\xc3\xa2\x16I?\xbf\xe0\x1f\xa8\xc8\xb7GU6\xd7\xa3O\x91\xd3\x1e\bS\x1a\xa6\xea\xe74\xdd\x83u\x8a\"w$A\xa9\b\xf5M\xa0\xd2\xb7\xa8X\x90\xe8^f:\xdf\x0e\x9d\xf2\xf6\xbdQ!\\\x87\xd2\xbb\xbb\xecc\xa4\x82z\xe5\x17Y\xff\xbc\x82\xdd\xdf{\xb7C\xbe\xc6\xd2\x81\xddo\x13i&#\x0f\x99\x18n\xe3\xb5{b\x9bK4\x95\xca/e\xc4\xff\xd7B\x1c.T\xb2\xc5\x02\xabami{\x92\xb5\xe3\x8f[}\\\x80\xc0)\xef;\x80\xea\x86xX\x0f\xdbU\x1a\x9fhC\x15\x9e\x1e\x96\xc2\x8d\xc0\x05\xbe8n\xbad@\xa4\xb6N\x01ZS\x9a\xb71\xdf\xbf\x10\xed\xaaC\x15\x86\x87\x9a\xe1~X\x1a\xdd\xd8\xc8\xa6i:#\xc3k\x12~\xcf\xb0\xc9\\\xd4\xd3M\xd3\x0ey\xc4', 0x0)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x30)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x640400, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @empty}, r5}}, 0x48)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200000, 0x0)
connect$caif(r7, &(0x7f0000000140)=@dbg={0x25, 0xff, 0x3}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0xffffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40}, {0xa, 0x4e23, 0x5, @loopback, 0x1}, r5, 0xfffffff9}}, 0x48)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:32:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x258a40, 0x0)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000200))
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000340)={0xa20000, 0x1, 0x3, <r4=>r0, 0x0, &(0x7f0000000300)={0x9b0960, 0xffff, [], @p_u8=&(0x7f00000002c0)=0xae}})
bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x6, 0x8, 0x20, "bdc7c9b356bca91a690c1b6059b30489b1ae101008929b4fafe4edde6fd67c9eefebffea42c846c75f3f6e348fe285eb83b9fae48805fbb93c93b92bfd69a2", 0x1a}, 0x60)
accept4$unix(r3, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xe8040000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  978.971138][ T2611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:22 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
r4 = io_uring_setup(0x1, &(0x7f0000000040))
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x80080, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000040))
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  979.160184][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xf5030000], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = accept$packet(r2, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r4 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r4, 0x3, 0x0, 0x100007dff)
fchmod(r4, 0x10)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000003000000000000000000000000000000e3b1b0868ea5b98835cb1ba3a467", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$packet(r3, &(0x7f0000000080)={0x11, 0xc, r8, 0x1, 0x4, 0x6, @random="38df5a82576d"}, 0x14)

19:32:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:22 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000500)={0xfffffffa, 0x35315258, 0x9, 0xfffffffa, 0x3, @discrete={0x0, 0x61}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
accept4$vsock_stream(r6, 0x0, 0x0, 0x0)
recvmsg$can_raw(r6, &(0x7f00000004c0)={&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/76, 0x4c}], 0x4, &(0x7f0000000440)=""/89, 0x59}, 0x10140)

19:32:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x2], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x401, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x200)

19:32:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x4], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:22 executing program 3:
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}}, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket(0x11, 0x2, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027d8ce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = gettid()
tkill(r5, 0x1000000000016)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r8=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
r9 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r10=>0x0, &(0x7f0000000000)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r9, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:22 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x4)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x44182)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev, 0x10}}}, 0x30)
setresgid(0x0, 0x0, 0x0)
r3 = memfd_create(&(0x7f0000000180)='\x10\x01\x00t\t-\x81E\xb67\x92^\xd4\x81E\xb3-1\xa6)\x99+/\xdf\x80\x00\x00\x00Hc\x9ag\x8f\xa3\xae\x0e\xad\x8d\xcc\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f00000005c0)=[{&(0x7f0000000340)="8d57ec69b731336d9882498fea0c29850eaff25b88f1c9ec5e797da56cccad89735ef0d5eddb9269c88b2caa3f936c2eae27b17fd2f6a6ec5e12e5558673893f2866fff45c4cdfef85f0ecaed01057ab9f5f946e3be262995c39244273937550d8730f4c5caa422ead8bebda8548682ea79a3b4a4568c199443082f54a54e05150bd97fbeeed936f6d017d64a28213", 0x8f}, {&(0x7f0000000400)="3db6189eda170a92fab0b0952f922b1e28a16dd7b5a0a26cb99e736cd175568be4558cf1a6c08999372517978a6640c72ea6dc58986d9e59e8a9baa2f367fa3525209deec9ba1fb31b90f23e5b5e11368d2315d7d38a257b546afc7a337c4323fd54a2f27ba86dcdc9a8243157bac7481060e98b9ae73519927dc3561acea6da3282a29b70e916f9", 0x88}, {0x0}, {&(0x7f00000004c0)="2c8caa02362082d40cea43ad87bdfeae1544438466727d60d19631fea372fc6d5d1b66a82d1801b751406cf8e71f87d4c542429b3bcdef870b6c5d239771263bdcfd1d817b6c0ecdec2e95dc8772a636b2330596b7d29be878915317662a585cf1c789c32976d111114128e558a51fea8ab676fd4ade125a21782cb72b95f038e262b73be6dc702c06428da9ee2fba1144ebb229e9a26f0aef1882ebaa1e85e00af528b72fb213a6b37200014fca963294502f5c8ddf7212d530d4ecc2434b394180511ce33afe9744", 0xc9}, {&(0x7f0000000700)="9ad1c3b5ef2ef3a58672336927f4650f174708e1d00dc0eec56c79253d638306abab810d64edc9da7cb8", 0x2a}, {&(0x7f00000001c0)}], 0x6, 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000240)={0x10, 0x5, 0x9})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r4)
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x2, 0x0, @multicast1}, 0x0, 0x80000)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c00000000000000010000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f3014bc4394d000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32], 0x170, 0x24000001}, {&(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)="1186470ce4fd503657cbb73fbbbe324f1c163213bdf2fa3942af79da5cba109f5f2fb74729d747a9307e3bf4d120aa20c6ac53833caf2338c1dda1e872f2d97b2d403e3d68ad17ed9fe39ff1eff72d818c3e53ca1e1c9314e8dfbf4046741842e94ca2f76bed975436e51d58b491c7c12d58b29bc69847d58b5d308deedf091f76b3d8dc09aad80ef2024053a6364bb839b7c8936291bbd5841513b48046de1f79513af2d731b78334a022204b5e6a4d401f89553a7d4937e29e019e15", 0xbd}, {&(0x7f0000000c80)="71f4f25d6598a498e8ab0494054529449ddfac55a5d64c3f307db045d37a86d20f5f5dccb24f7c7e27185630971daee9e6c3368b12d631383a8e03acf3fb0448c78964e56c04093b6dda0953b1c5de80438a8a89", 0x54}], 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="00000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}], 0x2, 0x40000)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x600, {}, 0x0, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "d66ee438c05a45ff21d7560f000000557cc5e50000a482ebf7888c305bee6fd6"})
r6 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r6, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:23 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x6], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:23 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = semget$private(0x0, 0x8, 0x0)
semop(r3, &(0x7f0000000080)=[{0x2}, {0x0, 0xffff}], 0x2)
semctl$GETNCNT(r3, 0x2, 0xe, 0x0)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="100006000000000020"], 0x34, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020"], 0x34, 0x0)
semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, r6, r8, 0x24, 0xffe0}, 0x1, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x800})

19:32:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  980.099889][ T2743] Dev loop0: unable to read RDB block 1
[  980.118914][ T2743]  loop0: unable to read partition table
19:32:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xc5], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:23 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  980.148619][ T2743] loop0: partition table beyond EOD, truncated
[  980.195888][ T2743] loop_reread_partitions: partition scan of loop0 (°Jƒpf”§QTÆ)÷[q©Z�;(’qÆ­²-M) failed (rc=-5)
19:32:23 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:25 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$CAPI_NCCI_GETUNIT(r4, 0x80044327, &(0x7f0000000040)=0x49)

19:32:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x100, 0x8, [0x4, 0x800, 0x44, 0x101, 0xfc01, 0x9, 0x3ff, 0x1f]}, &(0x7f0000000240)=0x18)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6)
keyctl$clear(0x7, r6)
keyctl$read(0xb, r6, &(0x7f0000000000)=""/136, 0x88)
keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffff8)

19:32:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x2e0], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:25 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:25 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:25 executing program 4:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xd4001, 0x0)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:25 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x33a], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  982.832502][ T2809] __nla_validate_parse: 13 callbacks suppressed
[  982.832512][ T2809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  982.898254][ T2811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3cc], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x100, 0x8, [0x4, 0x800, 0x44, 0x101, 0xfc01, 0x9, 0x3ff, 0x1f]}, &(0x7f0000000240)=0x18)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6)
keyctl$clear(0x7, r6)
keyctl$read(0xb, r6, &(0x7f0000000000)=""/136, 0x88)
keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffff8)

19:32:26 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:26 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000003580)='/dev/nvme-fabrics\x00', 0xb001, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mmap$qrtrtun(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r5, 0x401)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000003740)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec000000000801020000000000000000000000030c00048008000740000000082c0004800800014000000007080001400000000408000140000000ff08000140000010000800014000000fe70900010073797a300000000024000480080001400000209e080001400000004008000140000000070800014000000003060002400019000005000300110000000600024088f50000040004805400048008000440000085ed0800064000000001080004400000000708000640000000080800044000000948080004400000800008000440fffffff7080004400000000808000640000001ff0800034000000005aa585743e46dab7d4f46853513af839d7667de281e0f40c1025f100956af803bb285d148389d8fddcf42cda3b16e92c446bd21912119344ef4c264edfa3a26ced22bc8ebae81678fcec2ebc99736e69a12faa16ec828ac2551c21bb41d6e514f043453f38cf17904ed0973c689903cd0656b903d9f16b8ac99cd7244ce093f484fd3c4a443c2a5ace72e30c6ce57af61140cc3fe97f8b7a1969b849ca7c4dd984506a0a97190a58dbe5c53dbc074cd884eb986899b00cac0c2f7e47e3142d34d"], 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0xd0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000040)=0x1)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x3, "410aa72cf2636755"})
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3de], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  983.268477][ T2859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  983.299121][ T2856] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  983.461614][ T2887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x100, 0x8, [0x4, 0x800, 0x44, 0x101, 0xfc01, 0x9, 0x3ff, 0x1f]}, &(0x7f0000000240)=0x18)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r6)
keyctl$clear(0x7, r6)
keyctl$read(0xb, r6, &(0x7f0000000000)=""/136, 0x88)
keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffff8)

19:32:26 executing program 3:
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0xa20000, 0x224e, 0x1, <r1=>r0, 0x0, &(0x7f0000000040)={0x980910, 0x4, [], @value=0x4}})
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f00000002c0)=0xe)
r2 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000100))
io_uring_enter(r2, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3e5], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="02000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:26 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3f5], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:26 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r1, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  983.658588][ T2901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  983.690828][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:26 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="03000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:26 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00')
r7 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}}, 0x0)
r9 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r10 = socket(0x11, 0x2, 0x0)
bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500803103000000000101013c5811039e15775027d8ce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r11}, 0x14)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:26 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x4e8], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = socket$inet6(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8948, &(0x7f0000000000)={'bond0\x00'})
r3 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000256caa00000900000000000000000000050000090900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008804}, 0x2)

19:32:27 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  983.901732][ T2926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x600], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="04000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  983.976207][ T2933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
19:32:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = socket$inet6(0xa, 0x6, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8948, &(0x7f0000000000)={'bond0\x00'})
r3 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r3, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000256caa00000900000000000000000000050000090900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008804}, 0x2)

19:32:27 executing program 3:
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x1000, &(0x7f00000002c0)="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", 0x93, 0x0, &(0x7f00000012c0)="20e5f38ebcf894d9e2193702cd27f9282676855ee90c2b32f4048bfe6fc9bff4f0ae06e3c46b7a34612595cdeaf6bf0ab6ca2f61a7d48e1fe66e4df0d07b918c5dddfba76b3ac7caeac8fe2cf2d4bbd88eaaef2e3f5b8843d4bea5ed6eb274460bc1707f43c4d567c769daa47690e3b6a8a4ab5c1c8b3e99c8a31870cc82ac8ab0720c3a4de2b3d5ac759301b4ff4a7b208cb4"})
r1 = syz_io_uring_setup(0x1b46, &(0x7f0000000080)={0x0, 0xf370, 0x0, 0x1, 0xffffffff}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000001400)=@add_del={0x2, &(0x7f0000000040)='veth0_to_batadv\x00'})
io_uring_enter(r1, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001380)={{0x48, 0x7}, {0x62, 0x3}, 0x10000, 0x1, 0x3})

19:32:27 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

[  984.158446][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
19:32:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3a03], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="05000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  984.280270][ T2956] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  984.379660][ T2956] device bond61 entered promiscuous mode
19:32:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x3f00], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="06000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:27 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:32:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r0, 0x3, 0x0, 0x100007dff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000080001000000000008000100000000000800010002000000080001000008000100000000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002)

19:32:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x4000], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  984.643671][ T3017] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:27 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="07000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:27 executing program 5:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="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", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r6 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r7, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x5, 0xe9b7, &(0x7f0000000740)="e87d10ea3e969500f2f8fadd5eedae208e31980202c10b2c0bd1b4ebd028590b8ba69265e9f640ff80c7118ed0c1212427a8014a59c1adc58ffd4c47", 0x3c, 0x4, 0x0, {0x0, r10}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xc500], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  984.777119][ T3050] device bond62 entered promiscuous mode
19:32:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="08000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:28 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000080000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r2], 0x50}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7, 0x14301}}, 0x20}}, 0x0)

19:32:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xcc03], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  984.942994][ T3069] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  985.035265][ T3069] device bond63 entered promiscuous mode
19:32:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="09000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xde03], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:28 executing program 5:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="18a4e99afce17e776c2f0ddadd8fc8b4da89d28412c8c5a33764a13f7b78f5139750e156c3428a27d11acb7bbc127a0bc60ec3563da0e82dc01a92f2dd1ccf90f4eb385f9561a390e0e31b7757713124ea5cf68518314b9dfb2bc8a3b2844ad1b2f31498c8c5f287ceaff584240e656ec15d8fd2149e50c922b8a992cb42798634ab50b5c2d97e9f9d70085772a21e58baef4507e861f01899323c59f6d1680dc1364623610f541e8d626af25f3aa7996ee7e87b67c5434ac69eb0cd339cc61fb25a886bf6f608e76dbb7cb335a2280b717c065600e701ec60285974a9f27fe5ea1d6ee8164e44e9125836fe74ca881974358c7a750e6d78da312e708109", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r6 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r7, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x5, 0xe9b7, &(0x7f0000000740)="e87d10ea3e969500f2f8fadd5eedae208e31980202c10b2c0bd1b4ebd028590b8ba69265e9f640ff80c7118ed0c1212427a8014a59c1adc58ffd4c47", 0x3c, 0x4, 0x0, {0x0, r10}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:28 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="0a000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xe002], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:28 executing program 3:
r0 = syz_io_uring_setup(0x3414, &(0x7f0000000080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r1=>0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r2)
r3 = io_uring_setup(0x1, &(0x7f0000000040))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x7, 0x7, &(0x7f0000000280)=0xa9b})
syz_io_uring_setup(0x7d1, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_submit(r5, r6, &(0x7f0000001400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000300)={0x0, 0x0, [], {0x0, @reserved}})
syz_io_uring_submit(r5, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r4}}, 0xffffffff)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(0xffffffffffffffff)
r9 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80)
recvmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000500)=""/52, 0x34}], 0x4, &(0x7f0000000700)=""/98, 0x62}, 0x21)
r10 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$VIDIOC_G_MODULATOR(r10, 0xc0445636, &(0x7f0000000100)={0x80000000, "0f481e2d64e5005472bae325d12f358c80f53e15e889aeda2c8fcc075a58dee6", 0x2, 0x0, 0xe687, 0x4, 0x1})
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  985.337320][ T3123] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="0c000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  985.517108][ T3157] device bond64 entered promiscuous mode
19:32:28 executing program 5:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="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", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r6 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r7, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x5, 0xe9b7, &(0x7f0000000740)="e87d10ea3e969500f2f8fadd5eedae208e31980202c10b2c0bd1b4ebd028590b8ba69265e9f640ff80c7118ed0c1212427a8014a59c1adc58ffd4c47", 0x3c, 0x4, 0x0, {0x0, r10}}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xe503], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:28 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:28 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="0e000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:28 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = memfd_create(&(0x7f0000000180)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc00){\x94\x06_bT\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x01\x00\x86\xc0\x00\x9fE\x8e\xb0\xcaTx\xfc\xadn \xa16Mj\x9f7\xbb\x85\x8f\xb8T|\x94\xe2\xc45\xe0r\xfc\x00\x00\x00\x00\x00\x00\x00\x02RzJ?]UT#\xa6m:\xbb\xb5\x06\xbfl\x03F\xbd\xfb\xde\xbd\x16\xb6\xf1\xaf\xcc\xc9\xd4[\xee\xc9L\"!\x12\xc6\xec\xa7\xd3Y\r\x00\x9c\x00\xd7\x87\xd9\xf4\xfd\xa9B\xaf/N\xb1\v\x9aw\xc4\xeb\xfea\xff\xac\x83\x17\x96/I\x05\xa0 }\x11L\xc4\xfa', 0x4)
fallocate(r3, 0x3, 0x0, 0x100007dff)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xe804], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  985.803369][ T3217] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="0f000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

[  985.985062][ T3246] device bond65 entered promiscuous mode
[  986.018901][ T3214] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  986.026739][ T3214] #PF: supervisor instruction fetch in kernel mode
[  986.033240][ T3214] #PF: error_code(0x0010) - not-present page
[  986.039214][ T3214] PGD 42ded067 P4D 42ded067 PUD 3bf6e067 PMD 0 
[  986.045827][ T3214] Oops: 0010 [#1] PREEMPT SMP KASAN
[  986.051031][ T3214] CPU: 1 PID: 3214 Comm: io_wqe_worker-0 Not tainted 5.8.0-syzkaller #0
[  986.059365][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  986.069516][ T3214] RIP: 0010:0x0
[  986.072970][ T3214] Code: Bad RIP value.
[  986.077064][ T3214] RSP: 0000:ffffc9000a9df910 EFLAGS: 00010246
[  986.083211][ T3214] RAX: 1ffffffff10b0a93 RBX: dffffc0000000000 RCX: ffff8880a288e148
[  986.091185][ T3214] RDX: 000000000000003c RSI: 0000000020000740 RDI: ffff8880a921d7c0
[  986.099301][ T3214] RBP: 0000000020000740 R08: 0000000000000001 R09: ffff88808ee52c48
[  986.107274][ T3214] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000a9dfa28
[  986.115252][ T3214] R13: ffffffff88585480 R14: 000000000000003c R15: 0000000000000001
[  986.123241][ T3214] FS:  0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
[  986.132260][ T3214] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  986.138880][ T3214] CR2: ffffffffffffffd6 CR3: 000000003ddde000 CR4: 00000000001526e0
[  986.146855][ T3214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  986.154833][ T3214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  986.162806][ T3214] Call Trace:
[  986.166101][ T3214]  loop_rw_iter.part.0+0x26e/0x450
[  986.171224][ T3214]  ? rw_verify_area+0x11d/0x360
[  986.176118][ T3214]  io_write+0x6a2/0x7a0
[  986.180284][ T3214]  ? io_read+0xb60/0xb60
[  986.184533][ T3214]  ? mark_lock+0xbc/0x1710
[  986.188955][ T3214]  ? __lock_acquire+0x16cb/0x5640
[  986.193992][ T3214]  io_issue_sqe+0x1b0/0x60d0
[  986.198590][ T3214]  ? lockdep_hardirqs_on_prepare+0x530/0x530
[  986.204575][ T3214]  ? lockdep_hardirqs_on+0x76/0xf0
[  986.209783][ T3214]  ? kthread_use_mm+0x15f/0x3c0
[  986.214687][ T3214]  ? io_uring_setup+0x28c0/0x28c0
[  986.219719][ T3214]  ? lock_downgrade+0x830/0x830
[  986.224576][ T3214]  ? mark_held_locks+0x9f/0xe0
[  986.229342][ T3214]  ? lockdep_hardirqs_on_prepare+0x354/0x530
[  986.235324][ T3214]  ? trace_hardirqs_on+0x5f/0x220
[  986.240351][ T3214]  ? io_wq_submit_work+0x183/0x3d0
[  986.245468][ T3214]  io_wq_submit_work+0x183/0x3d0
[  986.250409][ T3214]  io_worker_handle_work+0xa45/0x13f0
[  986.255797][ T3214]  io_wqe_worker+0xbf0/0x10e0
[  986.260482][ T3214]  ? io_worker_handle_work+0x13f0/0x13f0
[  986.266118][ T3214]  ? lockdep_hardirqs_on+0x76/0xf0
[  986.271238][ T3214]  ? __kthread_parkme+0x13f/0x1e0
[  986.276265][ T3214]  ? io_worker_handle_work+0x13f0/0x13f0
[  986.281900][ T3214]  kthread+0x3b5/0x4a0
[  986.285967][ T3214]  ? __kthread_bind_mask+0xc0/0xc0
[  986.291085][ T3214]  ? __kthread_bind_mask+0xc0/0xc0
[  986.296206][ T3214]  ret_from_fork+0x1f/0x30
[  986.300616][ T3214] Modules linked in:
[  986.304593][ T3214] CR2: 0000000000000000
19:32:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0xf503], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

19:32:29 executing program 5:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="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", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r5, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

[  986.397961][ T3214] ---[ end trace 8ebe0be211aa798b ]---
[  986.403564][ T3214] RIP: 0010:0x0
[  986.407471][ T3214] Code: Bad RIP value.
[  986.418366][ T3214] RSP: 0000:ffffc9000a9df910 EFLAGS: 00010246
[  986.432288][ T3214] RAX: 1ffffffff10b0a93 RBX: dffffc0000000000 RCX: ffff8880a288e148
19:32:29 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

19:32:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="10000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x40000], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  986.442656][ T3214] RDX: 000000000000003c RSI: 0000000020000740 RDI: ffff8880a921d7c0
[  986.467375][ T3214] RBP: 0000000020000740 R08: 0000000000000001 R09: ffff88808ee52c48
[  986.483477][ T3296] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
19:32:29 executing program 3:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000)=<r1=>0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/97, 0x61}, {&(0x7f0000001700)=""/55, 0x37}], 0x2, &(0x7f0000001780)=""/79, 0x4f}, 0x103)
setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000001840)=0x5, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = accept4$vsock_stream(r4, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000f1fff6ff000000000c000100736b627072696f000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x1000000], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  986.511696][ T3214] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000a9dfa28
[  986.545734][ T3214] R13: ffffffff88585480 R14: 000000000000003c R15: 0000000000000001
[  986.566066][ T3214] FS:  0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
19:32:29 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0x3f8, 0x2e0, 0x1f0, 0x0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @remote, [], [], 'veth0_macvtap\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast1, @local, [], [], 'ipvlan1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x0, 0xd0}}}, {{@ipv6={@remote, @loopback, [], [0x2000000], 'bridge_slave_0\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@private2}}}, {{@ipv6={@private0, @private1, [], [], 'veth0_vlan\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

[  986.656183][ T3323] device bond66 entered promiscuous mode
[  986.680979][ T3214] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
19:32:29 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32, @ANYBLOB="48000000f1ffffff000000000c000140736b627072696f"], 0x38}}, 0x0)

19:32:29 executing program 5:
r0 = syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0xbd, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1aa07fba26d10d22384afef247fd2411f45b32ffbca51d853794428d47dc024b5228b35b8e67a40457d127705615f9481295dec760be0a0eb7", 0x39, 0x4409}, {&(0x7f00000001c0)="200780c9f0fef2b30a1fe4fcd5773f0c8dfe05ba3de57437d23c7419b1f6115105e6fc2cb0a5155e215c6bb5794b05be386b80af3375c91dfa0bd688b0b0ced2abdbea9e785665cd06db3c2c007c7f6335587406511a1fd9209283c2c052ec303c78c2e2f2ec06e873df94657e7846136a5daf0ac62ea81dc5ad91af3905", 0x7e, 0x1}, {&(0x7f00000002c0)="acbe2a35f28cb2799ca134c48d05828b43b1b8759c0bffbf08792de8c05a109fa23ae37c7181fea927ddec96006ed5845ec7bff6575bf64c65bcff34406b2d16a26b7963706a91da4044c0281dcde0516faad2a3bc6e3cd7d8c389174f4018f11923da064c062a3aae98", 0x6a, 0x7ff}, {&(0x7f0000000340)="d6abb18a570357e3940d83edd7d90855d8959454046ae894619f2545d4225653a510c34e5fcc85d468af73bb723591a29d511ddfa31714b6b3b69874e0780ada1e5020a67a2f70a903b27f280d578cd746836dc85fe019a019a5f7ea89b3bb2465cac9388e260ec719f81da2f6bf23cc73530985a1e49c420f45cc6141a1c5a581aaaf0d6eebba14643aeaf81ef95338138aa78630a11eac2fd6bd3515a808913bad31b1f11dd42e76053d1305dfbeb9fa3f66", 0xb3}, {&(0x7f0000000400)="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", 0xfe, 0x800}, {&(0x7f0000000500)="7e022767bcd746d4a6e00b91f08370c012dceaa853ed47ec78bea0b87aa1d875575371697f864499028102fd9f81f83517d94bb66db0819f7f8d5252750eb33cf32c7f220b1fc6dd29a193", 0x4b, 0x7ff}], 0x2826021, &(0x7f0000000640)={[{@barrier='barrier'}, {@subvolid={'subvolid', 0x3d, 0x8}}, {@usebackuproot='usebackuproot'}, {@treelog='treelog'}], [{@obj_user={'obj_user', 0x3d, ')#}(-$'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}]})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x7fffffff, 0x2, 0xa9a9, 0x9, 0x80000000, 0x2, 0x6]})
r4 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x0, 0x0)
bind$l2tp6(r5, &(0x7f0000000700)={0xa, 0x0, 0xffff, @loopback, 0x70b4f212, 0x1}, 0x20)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xffffffffffffffac)

19:32:29 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r8, 0x14301}}, 0x20}}, 0x0)

[  986.726910][ T3214] CR2: 0000000000ca3b73 CR3: 000000003ddde000 CR4: 00000000001526f0
[  986.757116][ T3214] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  986.822362][ T3214] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  986.840767][   T28] audit: type=1326 audit(1596828749.928:11): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=3341 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45fb1a code=0x0
[  986.846818][ T3214] Kernel panic - not syncing: Fatal exception
[  986.868297][ T3214] Kernel Offset: disabled
[  986.872626][ T3214] Rebooting in 86400 seconds..