5a220d5af151e79d3673c9488836ee2f1e5361c34cc4603fb6782db3b679bd61e1fe5921465b8454cd9094ef9803e7ad3c996d401c800da60f80225ef50b9a43cc11b6636"], 0x18}], 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)={0x4, {{0xa, 0x4e22, 0x8, @mcast1, 0x2d}}, 0x0, 0x9, [{{0xa, 0x4e24, 0x800, @mcast2, 0xfffffff8}}, {{0xa, 0x4e22, 0x4, @empty, 0x6}}, {{0xa, 0x4e22, 0xfffff90c, @private1, 0x7}}, {{0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x8001}}, {{0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, {{0xa, 0x4e21, 0x2, @empty, 0x1}}, {{0xa, 0x4e23, 0x4cf, @local, 0x4}}, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x7f, @empty, 0x3ff}}]}, 0x510) [ 1316.374731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.383178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.391615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.400034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:03:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3f) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x10000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) r2 = socket(0xa, 0x6, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbf8, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x71a) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'netpci0\x00', {0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x78, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc818}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x1f}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1d}]}}}, @IFLA_MASTER={0x8}]}, 0x78}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x103) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x78, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc818}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x2}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x1f}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x78}}, 0x0) 15:03:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000050011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1316.763531][T24965] tap0: tun_chr_ioctl cmd 1074812117 [ 1316.772777][T24969] tap0: tun_chr_ioctl cmd 1074025681 15:03:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x400000000000000) 15:03:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000060011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x9) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @none}, 0x8) write(r0, &(0x7f0000000000)="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", 0xfc) 15:03:46 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a3908a6886cceed10ab9b01b027", 0xdc}, {&(0x7f0000000c40)="5f9257f0f2bcff3ba8d986b579c537d9cf75cb611f5d6194c2bb8399098b4abe54414cfe9b7bd7cae1eca27c3ddb4aa90092f63db6903d2da0bdd36eae532df7a7d4a83c1048fa2b7ec11a4918e2ba1c9635baa2400a9b2ef611b977", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="a20544aacfd59222d2ef7dc595bd989f1ad764697bfd21dfd44c685a6eaef295c3c5015fae", 0x25}, {&(0x7f00000004c0)="b0696760b1c036c38531cbb4345eac885a4f0e461ba3285ddb9438cf976dba210b9cabc0f401eff8af3a0be7e631d7ad3f36f34039398267931494ee7ef08720ae9436031736213a1ea3eb5ec85a16297275f669c150326823923291bd23f4afbc632bed558d9266071f320a91e01077140879de6479cf7df53067f0f4d0b7e7955c54d220fcb1298f5a18c12876393625ecccedc496eeba31bd35bc771c7613a5e2dd81", 0xa4}], 0x2}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004580)=ANY=[@ANYBLOB="440000001000", @ANYRES32], 0x44}}, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 15:03:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x600000000000000) 15:03:47 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'vlan0\x00', @remote}) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0, 0xb7}, 0x8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x7}, 0x8) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x6) listen(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) setsockopt$inet_buf(r2, 0x0, 0x26, &(0x7f0000000080)="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", 0xfa) accept4$rose(r1, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) socket$kcm(0x2, 0x3, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) 15:03:47 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000090011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1317.827937][T25048] tap0: tun_chr_ioctl cmd 1074812117 [ 1317.837841][T25053] tap0: tun_chr_ioctl cmd 1074025681 15:03:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x800000000000000) 15:03:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', {0x4}, 0x2}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000450000889078ac141400ac1414bb0d0090788000"/44], 0x32) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xbf5ca743cb1a67fe}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x200e000}, 0x4008005) 15:03:48 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000a0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x900000000000000) [ 1318.938174][T25141] tap0: tun_chr_ioctl cmd 1074812117 [ 1318.946134][T25144] tap0: tun_chr_ioctl cmd 1074025681 15:03:48 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000c0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028408000a00", @ANYRES32], 0x40}}, 0x0) 15:03:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xa00000000000000) 15:03:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x1000, 0x3ba], 0x4}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x50}}, 0x0) [ 1319.592241][T25180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1319.611883][T25181] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:03:49 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000d0605030000000000000000000000000500050000000000050002000000000000009db3213e746d61703a69702c6d6163000000"], 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1319.753367][T25184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1319.864870][T25188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:49 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x220) 15:03:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000e0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xc00000000000000) 15:03:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:49 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1908, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}], 0x78) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='freezer.state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2c}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0xa}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x9}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004881}, 0x40004) 15:03:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xe00000000000000) 15:03:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000f0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1320.219174][T25223] tap0: tun_chr_ioctl cmd 1074812117 15:03:50 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'vxcan1\x00', {}, 0x7c97}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1c, r3, 0x31905e13403123b7, 0xfffffffe, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x2b, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x0, 0x7, 0x3f, 0xa0}, 0x7a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x80000001, 0x6, 0x5, 0x2}, 0x18}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xff, 0x80000001, 0x0, 0x6, 0x6}, 0x6d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xa94, 0x92, 0x2, 0xf5, 0x4}, 0x3f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x401, 0xc, 0x1, 0x81, 0x4}, 0x1a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fedbdf250000000008000700", @ANYRES32, @ANYBLOB="be135baa73446bc6c436b2bdc916d8cdface11325109183df74a989ded81ef19750a8df5c3dffca44e910e5aa24ff39ce18d82399bf10899ca927b54"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24044801) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x894c) [ 1320.739564][T25239] tap0: tun_chr_ioctl cmd 1074025681 [ 1321.090196][T25254] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1321.102658][T25254] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xf00000000000000) 15:03:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020084110011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1321.504773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.513163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.521607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.530051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:03:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1f, 0x5, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1321.959444][T25257] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1321.985028][T25257] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:51 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'vxcan1\x00', {}, 0x7c97}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1c, r3, 0x31905e13403123b7, 0xfffffffe, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x2b, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x0, 0x7, 0x3f, 0xa0}, 0x7a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x80000001, 0x6, 0x5, 0x2}, 0x18}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xff, 0x80000001, 0x0, 0x6, 0x6}, 0x6d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xa94, 0x92, 0x2, 0xf5, 0x4}, 0x3f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x401, 0xc, 0x1, 0x81, 0x4}, 0x1a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fedbdf250000000008000700", @ANYRES32, @ANYBLOB="be135baa73446bc6c436b2bdc916d8cdface11325109183df74a989ded81ef19750a8df5c3dffca44e910e5aa24ff39ce18d82399bf10899ca927b54"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24044801) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x894c) 15:03:51 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200003f0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x1000000000000000) [ 1322.665804][T25312] tap0: tun_chr_ioctl cmd 1074812117 [ 1322.676624][T25327] tap0: tun_chr_ioctl cmd 1074025681 [ 1322.685778][T25338] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1322.706391][T25338] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x136b54b900000000) 15:03:52 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000400011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:52 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'vxcan1\x00', {}, 0x7c97}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1c, r3, 0x31905e13403123b7, 0xfffffffe, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x2b, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x0, 0x7, 0x3f, 0xa0}, 0x7a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x80000001, 0x6, 0x5, 0x2}, 0x18}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xff, 0x80000001, 0x0, 0x6, 0x6}, 0x6d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xa94, 0x92, 0x2, 0xf5, 0x4}, 0x3f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x401, 0xc, 0x1, 0x81, 0x4}, 0x1a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fedbdf250000000008000700", @ANYRES32, @ANYBLOB="be135baa73446bc6c436b2bdc916d8cdface11325109183df74a989ded81ef19750a8df5c3dffca44e910e5aa24ff39ce18d82399bf10899ca927b54"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24044801) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x894c) [ 1323.595281][T25366] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.606417][T25366] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x6000000000000000) 15:03:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020065580011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:53 executing program 2: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'vxcan1\x00', {}, 0x7c97}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x1c, r3, 0x31905e13403123b7, 0xfffffffe, 0x0, {0xd, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x2b, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x0, 0x7, 0x3f, 0xa0}, 0x7a}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x80000001, 0x6, 0x5, 0x2}, 0x18}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xff, 0x80000001, 0x0, 0x6, 0x6}, 0x6d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xa94, 0x92, 0x2, 0xf5, 0x4}, 0x3f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x401, 0xc, 0x1, 0x81, 0x4}, 0x1a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x6040}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fedbdf250000000008000700", @ANYRES32, @ANYBLOB="be135baa73446bc6c436b2bdc916d8cdface11325109183df74a989ded81ef19750a8df5c3dffca44e910e5aa24ff39ce18d82399bf10899ca927b54"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24044801) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x894c) 15:03:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x6558000000000000) [ 1323.845207][T25392] tap0: tun_chr_ioctl cmd 1074812117 [ 1323.900480][T25399] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.915123][T25399] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.941212][T25403] tap0: tun_chr_ioctl cmd 1074025681 15:03:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000600011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:53 executing program 2: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400)}, 0x38) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c000700000000000000000000000000000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) close(r3) r5 = socket(0x5, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf0, 0x0, 0x408, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x90}, 0x24000841) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, r1, 0x11}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x97, &(0x7f00000002c0)=""/151, 0x41000, 0x8, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) pipe(&(0x7f0000000840)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r7, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 1324.694694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.703131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:03:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020058650011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x8100000000000000) 15:03:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ed1785", 0x20, 0x3c, 0x0, @empty, @empty, {[@hopopts={0x11, 0x1, [], [@pad1, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x5}]}], "092ea6ea0e57be05"}}}}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) socketpair(0x23, 0x3, 0x80000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) 15:03:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000fc0)={r3}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x800, 0x8, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9aac5189", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250b000000050008000400000009000700cde3e0009b000000050008000000000014000a000e0fcce6217808ef088ac8a9992520b104000a00090007000a059697d6000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4880) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'virt_wifi0\x00', 0x4}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000200001800c00028008000200000000000d0001007564703a73797a3200000000"], 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x11c, r6, 0xe20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x50000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x11c}}, 0x4000091) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x405, 0xf000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x1f0, 0x200, 0x200, 0x1f0, 0x200, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'bridge_slave_0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r8 = accept(r7, &(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000029c0)=0x80) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000004040)=@netrom) 15:03:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000810011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x88a8ffff00000000) [ 1326.351326][T25529] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 4, id = 0 [ 1326.378482][T25518] tap0: tun_chr_ioctl cmd 1074812117 [ 1326.384246][T25521] tap0: tun_chr_ioctl cmd 1074025681 15:03:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x9effffff00000000) 15:03:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x800, 0x8, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9aac5189", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250b000000050008000400000009000700cde3e0009b000000050008000000000014000a000e0fcce6217808ef088ac8a9992520b104000a00090007000a059697d6000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4880) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'virt_wifi0\x00', 0x4}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000200001800c00028008000200000000000d0001007564703a73797a3200000000"], 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x11c, r6, 0xe20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x50000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x11c}}, 0x4000091) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x405, 0xf000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x1f0, 0x200, 0x200, 0x1f0, 0x200, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'bridge_slave_0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r8 = accept(r7, &(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000029c0)=0x80) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000004040)=@netrom) 15:03:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020011840011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x800, 0x8, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9aac5189", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250b000000050008000400000009000700cde3e0009b000000050008000000000014000a000e0fcce6217808ef088ac8a9992520b104000a00090007000a059697d6000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4880) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'virt_wifi0\x00', 0x4}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000200001800c00028008000200000000000d0001007564703a73797a3200000000"], 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x11c, r6, 0xe20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x50000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x11c}}, 0x4000091) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x405, 0xf000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x1f0, 0x200, 0x200, 0x1f0, 0x200, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'bridge_slave_0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r8 = accept(r7, &(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000029c0)=0x80) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000004040)=@netrom) 15:03:57 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:03:57 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000f00011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xc00e000000000000) 15:03:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1e, 0x800, 0x8, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9aac5189", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250b000000050008000400000009000700cde3e0009b000000050008000000000014000a000e0fcce6217808ef088ac8a9992520b104000a00090007000a059697d6000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4880) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'virt_wifi0\x00', 0x4}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000200001800c00028008000200000000000d0001007564703a73797a3200000000"], 0x34}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x11c, r6, 0xe20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x50000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x11c}}, 0x4000091) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x405, 0xf000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x1f0, 0x200, 0x200, 0x1f0, 0x200, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'bridge_slave_0\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r8 = accept(r7, &(0x7f0000003fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000029c0)=0x80) ioctl$SIOCRSGL2CALL(r8, 0x89e5, &(0x7f0000004040)=@netrom) 15:03:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1327.682324][T25591] tap0: tun_chr_ioctl cmd 1074812117 [ 1327.723304][T25591] tap0: tun_chr_ioctl cmd 1074025681 15:03:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xf0ffffff00000000) 15:03:57 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0xff}, 0xa) [ 1327.904680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.913253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.921679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:03:57 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000020011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1328.270758][T25626] __nla_validate_parse: 1 callbacks suppressed [ 1328.270769][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xffffff7f00000000) 15:03:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000030011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:58 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0xff}, 0xa) 15:03:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1329.413456][T25669] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:03:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:03:59 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000040011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:03:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0xfffffffffffff000) 15:03:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072003102000000000000000007000000b69e4ee93eb1182704dc939bd9b5827c80d4b686fba0fc818f6bc20ae23f8f213f6566d0121383dd77282a", @ANYRES32=r2], 0x18}}, 0x0) [ 1329.920762][T25702] tap0: tun_chr_ioctl cmd 1074812117 15:04:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000050011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:00 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0xff}, 0xa) 15:04:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800007f00003102000200000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:00 executing program 1: r0 = socket(0x10, 0x6, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "af72a8cdd09d7d81", "670562e98b29ef936dc357ba952db8a7", "980400", "5382a9e8d57b0b49"}, 0x28) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0xfff, 0x2, 0x8}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x93c9079df47e6ad0}, 0x80) 15:04:00 executing program 1: setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0x3c, [], 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/60}, &(0x7f0000000240)=0x78) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="11cf3becf600fddbdf2500"/20], 0x1f}, 0x1, 0x0, 0x0, 0x4004}, 0x0) [ 1330.956277][T25745] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002200)={'vxcan0\x00', r2}) bind$can_raw(0xffffffffffffffff, &(0x7f0000002240)={0x1d, r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'ip_vti0\x00', 0x2}) 15:04:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:01 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0xff}, 0xa) 15:04:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000060011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000029c0)=@delchain={0x4c9c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8}, {0x8, 0xc}, {0x9, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3f}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x3804, 0x2, [@TCA_MATCHALL_ACT={0x2e38, 0x2, [@m_police={0x2e34, 0x9, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2dcc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x20}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x6, 0xffffff7f, 0x1, 0xf, 0x3, 0x401, 0x6, 0x9, 0x1, 0x9, 0x1, 0x5, 0xc17, 0x100, 0x7, 0x0, 0x3, 0x51f, 0xe0dc, 0xf4, 0x5, 0x0, 0x2, 0x4, 0x1, 0x400, 0xa9, 0x7fffffff, 0xc9c6, 0x7, 0x5, 0x1000, 0x3, 0x9, 0x1f, 0x1000, 0x80000001, 0xff, 0x250, 0x6, 0x7, 0x4, 0x2, 0x20004, 0x4, 0x80, 0x5, 0xfff, 0x3, 0x4, 0x5, 0x6, 0x2, 0x1, 0x400, 0x9, 0xfff, 0x4, 0x2, 0x24, 0x1000, 0xfff, 0x3, 0x3, 0x1f, 0x74, 0x79c, 0x0, 0x5, 0xf61, 0x80000001, 0x1, 0x5, 0x4, 0x3, 0x1, 0x35e, 0x1f, 0x40, 0x5, 0x400, 0x4cc, 0x9, 0xa2cf, 0x10000, 0xc0, 0x10000, 0x3, 0x101, 0x51390167, 0x3, 0x3ff, 0x3ff, 0x0, 0x20, 0x1ff, 0x9, 0x8, 0xfffffffa, 0x5200, 0x40, 0x5, 0x1, 0x0, 0x8, 0x5f, 0x7, 0x2, 0x4, 0x40, 0x1, 0x8336, 0x4, 0x2, 0x7ff, 0x6, 0xa5, 0x1ff, 0x5, 0xa0b, 0x0, 0x9, 0x6, 0x5, 0x9, 0xe1e, 0x6, 0x0, 0x7, 0x80000000, 0x401, 0x1, 0xe2, 0x7, 0x7, 0xfffffffd, 0x5, 0x2, 0x6, 0xffffff00, 0x9, 0x7, 0xfffffff8, 0x80000000, 0x2, 0x9, 0x2, 0x0, 0x8, 0x80000000, 0x5, 0x3, 0x0, 0x3ff, 0x8, 0x3, 0x0, 0xc7f2, 0x4, 0x2, 0x8, 0x401, 0xb75, 0x1f80, 0x70, 0x7fff, 0xffffffff, 0xa8, 0x9, 0xfffffffd, 0xff000000, 0x6, 0x0, 0x4, 0x8, 0x40, 0x4, 0x14, 0x1, 0x0, 0x1, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x947, 0x800, 0x7fff, 0x6, 0x2, 0x0, 0x3f, 0x5, 0x3c, 0xfffffffe, 0x71, 0x6, 0x7, 0x200, 0x7, 0x9, 0x81, 0x101, 0x0, 0x8, 0x1, 0x1d, 0x10001, 0x8001, 0xffffff58, 0x9, 0x6, 0x2, 0x7, 0xf1b, 0x50000000, 0x10000, 0x7fffffff, 0x7, 0xffffffe6, 0x8, 0x8, 0x3, 0x1b662a17, 0x8, 0x7, 0x4, 0x3d84, 0xa, 0x7fffffff, 0x80f, 0x8, 0x0, 0x9, 0x13b, 0x1, 0x4, 0x1, 0x66, 0x9, 0x9e, 0x79f, 0x0, 0x101, 0xff, 0x0, 0x1, 0x0, 0xfffffff7, 0x1, 0x4, 0x3bc8, 0x4, 0x10000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x2, 0xfffffff9, 0xffffffff, 0x1, 0x348, 0x3f, 0x0, 0x7f, 0x7, 0x565, 0xffffffff, 0x2, 0x9, 0x4fd, 0xfffffffa, 0x5, 0x0, 0x7, 0x6, 0x4, 0x8, 0x0, 0x0, 0x0, 0xfb1f, 0x4, 0x419, 0x0, 0x931, 0x3, 0x4, 0x40, 0x9, 0x9, 0x2, 0x200, 0x4, 0x4, 0x9, 0x1ff, 0x3, 0x3, 0x6, 0x3, 0x7, 0x7, 0x1, 0x10000, 0xffffffce, 0x3, 0x4a, 0x4, 0x1f, 0x6, 0x3f, 0x1, 0x3, 0x4, 0x1, 0xe3c, 0x7ff, 0x4, 0x8, 0x2, 0x6, 0x101, 0x39, 0x471, 0x30000000, 0x1, 0x3f, 0x17, 0x5, 0x6, 0x8, 0x1, 0x42f, 0xff, 0xff, 0x3, 0x82, 0x7, 0x2, 0x7, 0x2, 0x8000, 0x3, 0x5, 0x1000, 0x9, 0x7fff, 0x9, 0xc, 0x7, 0xfffff001, 0x5, 0x7, 0x7c30e8d8, 0x1f, 0x2, 0x7, 0xafe8, 0xffff, 0x313, 0x1, 0x1, 0x5, 0x5, 0x1, 0x3, 0x8, 0x7, 0x4a, 0xb6, 0x0, 0x5, 0x9, 0x5, 0x80000001, 0x0, 0xfffffff9, 0x0, 0x7, 0x81, 0x9, 0x200, 0x1f, 0x7, 0x2, 0xc7f, 0x3, 0xfff, 0x2, 0x32fb, 0x4, 0x0, 0x6, 0x1, 0x3, 0x6, 0xdcc, 0x4, 0xcf2a, 0x2, 0x1, 0x7, 0xcca, 0x33a2, 0x1, 0xfb, 0x6, 0x2, 0x1, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0x7, 0xcb62, 0x9, 0x3, 0x4, 0x1ff, 0x7, 0x1, 0x2, 0x7fffffff, 0x2, 0x0, 0x5, 0x8, 0x47, 0x401, 0xd8, 0x7f, 0x4, 0x5, 0x6, 0x6, 0x7, 0xfffff000, 0x7, 0x7, 0x8, 0x7, 0xffff, 0x7fffffff, 0xfffff60c, 0x8, 0x8001, 0x1, 0xd8, 0x5, 0x4, 0x5, 0x6, 0x4, 0x4, 0x5, 0x2, 0x7, 0x4, 0x2, 0x8, 0xff, 0xfffff001, 0x1, 0x3a3, 0x1, 0x5, 0x2, 0x474, 0x100, 0x8, 0x80, 0x3, 0x0, 0x80000001, 0x2, 0x1ff, 0xa74, 0x3f, 0x9, 0x3, 0x9, 0x4, 0x3, 0x1, 0x47b80000, 0x800, 0x401, 0x80000001, 0x834, 0xbdec, 0x7, 0xfffffffb, 0x9, 0x7, 0x3ff, 0x7fff, 0x10001, 0x200, 0xfffffffe, 0xffff, 0x0, 0x2, 0x1, 0xcf, 0x8, 0x1ff, 0x7fff, 0x5, 0x401]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x101, 0xfffffff9, 0x9, 0x1, 0x6f0, 0x1, 0x100, 0x6, 0x83a, 0x40, 0x3, 0x10000, 0x779, 0x20000000, 0x2000000, 0x80, 0x48, 0x7, 0x5, 0x10000, 0x4, 0x42, 0x0, 0x1, 0xec94, 0x9, 0x5, 0xfffff801, 0xfffffffa, 0x6, 0x5, 0x1, 0x5, 0x12, 0x1, 0x401, 0xa2dc, 0x8, 0x7, 0x1f, 0x10000, 0x8, 0x80000001, 0xf8, 0x7fffffff, 0x6, 0x6, 0x1, 0x3, 0x6, 0x0, 0xdd, 0x9, 0xffff, 0x2, 0x8, 0x81, 0x3f, 0x8000, 0x7ff, 0x80, 0x6, 0xffff, 0x8, 0x80000001, 0x5c, 0x7, 0x1, 0x99, 0x4, 0x9, 0x0, 0x7, 0xb8, 0x2, 0x7, 0x12, 0xffffffff, 0xb8, 0x0, 0xffff, 0x0, 0x8, 0x4, 0xfda, 0x2, 0x6, 0x2, 0x2, 0x3, 0x5, 0x0, 0x2, 0x1, 0x3, 0x2, 0x164, 0x4, 0x3, 0x7, 0xbc, 0x5, 0x99, 0x1, 0x2, 0xffff, 0x101, 0x1, 0x0, 0xffff1aac, 0x0, 0x4, 0x1, 0x45d, 0x7, 0x6, 0x7, 0x7, 0x6, 0x8, 0x0, 0x8, 0x5, 0xfffffffe, 0x20, 0x1000, 0x9, 0x8001, 0x6, 0xd18f, 0x6, 0x1000000, 0x200, 0x4, 0x2, 0x4, 0x78, 0x2, 0x6, 0x6, 0x1, 0x7, 0x401, 0xff, 0x8, 0x5, 0xfffffff9, 0x7, 0x7, 0x9, 0x4, 0x80000000, 0x9c1, 0x1, 0x5, 0x6, 0x8, 0xffff, 0xffff, 0x1, 0x1, 0x1, 0x8, 0x8, 0xb, 0x1, 0x9, 0x80000000, 0x5, 0x2, 0x116, 0x5, 0x8, 0x0, 0x8, 0x1f, 0x8000, 0x1, 0x1f3d, 0xeb39, 0xfffff643, 0x0, 0x1, 0x7, 0x9, 0x0, 0x100, 0x800, 0x1, 0x8, 0xffff7fcb, 0x61f, 0x9, 0x3, 0x1, 0x101, 0xea, 0x8, 0x10001, 0x9, 0x9, 0x0, 0x9, 0x9, 0x5f1, 0xc10, 0xfff, 0x68ce, 0x37b, 0x9, 0x200, 0xe8c3, 0x9, 0x3, 0x4, 0x4, 0x7, 0x5, 0x1, 0x0, 0x800, 0x1000, 0x9, 0x8000, 0x40, 0x1f, 0x1, 0x8, 0x0, 0x0, 0x8, 0x4, 0xffff, 0x1f, 0x800, 0x98, 0x100, 0xa6e, 0x1, 0x1ff, 0x7, 0xa7, 0x401, 0x5, 0x99, 0x0, 0x0, 0x80000001, 0x4, 0x22, 0x7fffffff, 0xffffffff, 0x3e13, 0x5c23, 0x162]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xaa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x81, 0xc08, 0x80000000, 0x4, 0x0, 0x80000000, 0x6, 0x1, 0x80000000, 0xfffff801, 0x7ff, 0xb2bc, 0x7f, 0x5, 0xfff, 0xffffffff, 0x400, 0x40, 0x8001, 0x3, 0x3, 0x3, 0x7, 0xffffffff, 0x3f, 0x81, 0x800, 0x0, 0x7fffffff, 0x817, 0x46b, 0x2, 0xac, 0x2, 0x4, 0x4, 0x7, 0x5, 0x0, 0x2, 0x80, 0x1, 0x3, 0x1f8, 0xffffffff, 0x3f, 0x4, 0x5, 0x3, 0x5, 0x5, 0x1000, 0x254, 0x7, 0x6, 0x2, 0x401, 0x5ab, 0x4, 0x8, 0x9, 0x10000, 0xeed2, 0x1f, 0x5, 0x10000, 0x1, 0x4, 0x2, 0x8, 0x4bc, 0xff, 0x3, 0x6, 0x3ff, 0xfffffffe, 0x9, 0xa5, 0x1ff, 0x54, 0x7, 0x46f, 0xd2, 0x0, 0x4a, 0x100, 0x754df681, 0x1000, 0x1, 0x6, 0x7fff, 0x200, 0x3f, 0x8001, 0x9d0, 0x100, 0x7, 0xfff, 0x80000001, 0x101, 0x4, 0x813a, 0x80, 0x8, 0x8, 0xe00000, 0x8, 0xfdf, 0x7fff, 0x5, 0xffff0001, 0x3, 0x2159e38d, 0x4, 0x8, 0x4, 0x5, 0xfffffffa, 0x9, 0x200, 0x6, 0x81, 0x9, 0x1, 0xbdc3, 0x7fffffff, 0x19, 0x7, 0x9, 0x653c10ec, 0x9, 0x7fff, 0x8, 0x3, 0x5, 0x7, 0xebf, 0x80000000, 0x8, 0x9, 0x1, 0x6eba1bbf, 0x9, 0x6, 0x4, 0xe, 0x480, 0x1, 0x1, 0x6e, 0x2, 0x0, 0x8, 0x1, 0x4, 0x10000, 0x3, 0x8, 0x3, 0x1, 0x3, 0x9, 0x7fffffff, 0x6, 0x400, 0x14, 0xdf8, 0x2, 0x899c, 0x4b, 0x1, 0x7f, 0x1, 0x7f, 0x0, 0xfff, 0x7, 0x101, 0x741c, 0x1, 0x3f, 0x1, 0x7ff, 0x3, 0x7, 0x9f, 0xce, 0x5, 0x5a4, 0xfff, 0x3, 0x8001, 0x3f, 0x10000, 0x0, 0x5, 0x40, 0x1, 0x7f, 0xb6, 0xfffffffd, 0x8c6, 0x101, 0x514, 0x0, 0x7ff, 0x3, 0xf3cd, 0x40, 0x8001, 0x7, 0xffffffff, 0x8, 0x0, 0x7, 0x7f, 0x3, 0x9, 0xffffffe0, 0x7fff, 0x400, 0x5, 0x73, 0x0, 0x0, 0xb7, 0x6, 0x0, 0x2, 0xfffffffc, 0x400, 0x7fffffff, 0x1ff, 0x800, 0x2, 0x0, 0x80000000, 0x1f, 0x4, 0x10000, 0xf502, 0x8, 0x5, 0x4, 0x400, 0x2, 0x2141b2d8, 0x401, 0x5, 0x0, 0x10001, 0xfffffe01, 0x400, 0x8]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xffffffff, 0x4, 0x1000, 0x7, 0x0, 0x0, 0xcf4d, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x8, 0x1, 0xdc4, 0x3, 0x2, 0x7, 0x5, 0x2598, 0x8, 0xffffffff, 0xa26, 0x1ff, 0x7976, 0x0, 0x5, 0xfffffffc, 0x4, 0x101, 0x5, 0x3, 0x1000, 0x8, 0x4b4d, 0x7ff, 0x5, 0x5, 0xffff0000, 0x2, 0x574, 0x7, 0x80000001, 0x3f, 0x2, 0x1, 0x3f, 0x3, 0x8d3c, 0x6, 0x7fff, 0x80000001, 0x3f, 0x78a, 0x8c5, 0x800, 0x4, 0x7, 0x2, 0x8000, 0x6, 0xfbb, 0x7, 0x7fffffff, 0x1, 0x80000000, 0xf74e, 0x6, 0x2, 0x9, 0x2, 0x2d, 0x1, 0x5, 0x6, 0x1, 0x5, 0xd517, 0xac3, 0x2, 0x1, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x2, 0x5, 0x55, 0x8, 0xa15, 0x3ff, 0x4, 0x9, 0x6, 0x42d, 0x5, 0x4, 0x1f, 0x2, 0x10000, 0x3, 0x101, 0x0, 0x800, 0x80, 0x1055, 0x80000001, 0x0, 0x6163, 0x2c83, 0x1, 0x9, 0x4f3e, 0x200, 0x0, 0x1000, 0xfff, 0x8, 0x3db000, 0x2, 0x0, 0x1ff, 0x6, 0x1, 0x3, 0x7, 0x4, 0x8000, 0x1, 0x1, 0x1ff, 0x80000000, 0x0, 0x200, 0xfffffffb, 0x401, 0x1, 0x476, 0x8, 0xfffffffb, 0xbf, 0x7, 0x401, 0x3, 0x10000, 0x8, 0x2598, 0x9, 0x200, 0x2294, 0x400, 0x3, 0x3, 0x80, 0x4, 0x5, 0xf827, 0x6, 0x7, 0x9, 0x1f, 0x7, 0x1, 0x5, 0x1ff, 0x500, 0x4000000, 0x9, 0x8001, 0x1, 0x20, 0xfff, 0x40000000, 0x401, 0x0, 0x400, 0x2ba, 0x2, 0x5, 0x401, 0x5, 0x3f, 0x10001, 0x2, 0x2, 0x1, 0x800, 0xad66, 0x69eda1d7, 0xbb0, 0xfff, 0x8, 0x7fffffff, 0xffffff7f, 0x6, 0x9, 0x400, 0x5, 0x80000001, 0x4, 0x7, 0x1, 0x1, 0x2, 0x5754, 0x9, 0x8001, 0x8000, 0x3, 0x69, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0x0, 0xcce, 0x1f, 0xfe000000, 0x1, 0x1000, 0x8, 0x2f85, 0x9, 0x5, 0xffff0000, 0x80000000, 0xf8000000, 0x99f0, 0x9, 0x4, 0x4, 0x9, 0x1e80e9be, 0xa7d, 0x10000, 0x7f, 0x9, 0x9, 0x5, 0x9, 0x3f, 0x80000001, 0x9, 0x1, 0x5c6f, 0x2, 0xc0000000, 0x413a, 0x27e, 0x400, 0x80000000, 0x1a5, 0x100, 0xd17]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0xf491, 0x5680ab2b, 0x9, 0xc4b5, 0x7f, 0xfd5, 0x1, 0x5, 0x7, 0x7fff, 0x1, 0x8, 0x6, 0x4, 0x1, 0x8001, 0x7, 0x4, 0x85, 0x7fff, 0x0, 0x20, 0xfffffffc, 0x5ca25313, 0x6, 0x6, 0x8, 0x2, 0x0, 0x1, 0x400, 0xb0, 0x16800, 0xbce, 0x4, 0x0, 0x8, 0x6, 0x9, 0x3, 0x7f, 0x7ff, 0x2, 0x80000000, 0x7, 0x6, 0x5, 0xffffffff, 0x7, 0x7, 0x3f39, 0x60, 0x10000, 0xa165, 0xfff, 0xfffffffd, 0x100, 0x9, 0x5, 0x200, 0x60, 0x800, 0xf8d, 0x3, 0x101, 0x9e3, 0x9, 0x5, 0x3, 0xffff, 0x500000, 0x4, 0x5, 0xffffffe3, 0xb6, 0x6, 0x7fff, 0x5, 0x40, 0x1, 0x7, 0x4, 0x8, 0x0, 0x8, 0x8e, 0x5, 0x0, 0x6, 0x4, 0x200, 0x10000, 0x6, 0xfff, 0x80000000, 0x886, 0x2, 0x8, 0x6, 0x7ff, 0x3, 0x0, 0x8, 0x2, 0x6, 0x9, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0xffff0000, 0x1, 0x8, 0x8, 0x101, 0x3ff, 0x7e, 0x0, 0x2, 0x27, 0x6, 0x9, 0x80000000, 0x3f, 0xc6, 0xa0000000, 0x4, 0x8001, 0x8, 0x400, 0x5, 0x3ff, 0xfffffff8, 0x2487, 0x6, 0x8000, 0x1000000, 0x5, 0x3f, 0x8, 0xc6, 0x758, 0x20, 0x5bfa, 0x7fff, 0x81, 0x6, 0x3cf, 0x5, 0x5, 0x3, 0x1, 0x8, 0x3, 0xfffffff9, 0xfffffc01, 0x2, 0x8, 0x9, 0xfffffffc, 0x5, 0x1, 0x10000, 0x0, 0x8, 0x202, 0x800, 0x7f, 0x6, 0x81, 0x9, 0xff, 0xcc, 0x8, 0x20, 0x1, 0x6, 0x0, 0xdb, 0x9, 0xfffffff7, 0x7fff, 0xb549, 0x5, 0x80000000, 0x55, 0x9, 0x800, 0x20, 0x54b6c574, 0x401, 0x52d2, 0x1000, 0x53, 0x7f, 0x6, 0xc0000000, 0x2, 0x3, 0x7, 0x6, 0x0, 0x8, 0x4, 0x9, 0x1, 0x1, 0x6, 0xfffe0000, 0x5, 0x8, 0x9, 0x2, 0x2, 0x9, 0x20, 0x2b8b76c, 0x40, 0xff, 0x2, 0x5, 0x800, 0xfff, 0x7, 0xff, 0x1, 0x1, 0x7fffffff, 0x9, 0x4, 0x9, 0xeae, 0x2, 0x3ff8000, 0x3, 0x85324613, 0x0, 0x0, 0x1000, 0x5, 0x29, 0x1000, 0x2, 0x9, 0x2, 0xfffeffff, 0x10000, 0x8, 0x3ff, 0x1, 0x9, 0x1ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0x7, 0x2, 0x80, 0x0, 0x0, 0x0, 0x7fffffff, 0x5c, 0x0, 0xf64, 0xafa, 0x0, 0x1d17, 0x9, 0x800, 0x91b, 0x1, 0xa1, 0x800, 0x4, 0x9, 0x7, 0x400, 0xc8, 0x2, 0x10001, 0x800, 0x9, 0x20, 0x8, 0x6, 0x7f, 0xffff54f4, 0x4ca481c7, 0x3b, 0x5, 0x6, 0x56e8, 0xb82, 0x9, 0xffffffff, 0x5, 0x80, 0x8000, 0x41d, 0x1, 0x5, 0x1, 0x3, 0x9, 0x4, 0x800, 0xfffffffe, 0x9, 0x200, 0x7fff, 0xb7a9, 0x0, 0xfffffff9, 0x1ff, 0xff, 0x6, 0x10001, 0x400, 0x0, 0x10001, 0x20, 0x180000, 0x63, 0x2, 0x2, 0x1, 0x0, 0x4bc8, 0x7f8d, 0x6, 0x81, 0x10001, 0x0, 0x61dd, 0xfffffff7, 0x9, 0x0, 0x5, 0x400, 0x3f, 0x3440, 0x7, 0x5fb, 0x0, 0x6, 0x40, 0x80000001, 0x5, 0x3, 0x0, 0xc6, 0x6, 0x7, 0x5, 0x9, 0x0, 0x7, 0x8, 0x8, 0x9, 0x1, 0x1, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x4, 0x9, 0xd83, 0x6, 0xfffffff9, 0xfffffc01, 0xcd6, 0x10000, 0x3, 0x101, 0x9, 0x1, 0x5, 0x92f, 0x2, 0xc8, 0x7e4a, 0x4, 0xff, 0x4, 0x9, 0x2, 0x80, 0x8a1, 0xb8cb, 0x3ff, 0xfffffffb, 0x2, 0x1, 0x6, 0x3, 0x1000, 0x8, 0x7, 0x6, 0x1f, 0x800, 0xfffffffc, 0x4, 0x7d, 0x1, 0x20, 0x4, 0x3, 0x2, 0x6, 0x4, 0x8, 0xffffff7f, 0x4, 0x5e4, 0x80, 0x10001, 0xc2a, 0x1, 0xca, 0x1ff, 0x3, 0xc, 0x9, 0x4, 0xffff, 0x5, 0x10001, 0x5, 0x3, 0x0, 0x0, 0xfffffda4, 0x5, 0x20, 0x1, 0x23b, 0x1f, 0x6, 0x5, 0x40, 0x8, 0x9, 0xffffffff, 0x7fffffff, 0x800, 0x0, 0x4, 0x7, 0xffffffff, 0x0, 0x7fff, 0x6, 0x1, 0x8, 0x6, 0x5, 0x1, 0x4, 0x4, 0x2, 0x800, 0x5, 0x0, 0x4, 0xfffffffb, 0x20, 0xfffff801, 0x0, 0x713, 0x0, 0xf08, 0x9, 0x9, 0xfffffffe, 0x1ff, 0x6, 0x0, 0x5, 0x1000, 0x1, 0x3ff, 0x6, 0x6, 0x4, 0x40, 0x5, 0x8, 0x8, 0x8, 0x1, 0x3ff, 0x7fffffff, 0x400, 0xa67f, 0xfffffff7, 0x80, 0x6, 0x9, 0x81, 0x20, 0xfffffffe, 0x8000, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x0, 0x10001, 0x589b, 0x8, 0x1, 0x5, 0xff, 0x0, 0x7f, 0x72ac, 0x7ff, 0x7, 0xb1ec, 0xf, 0x9, 0x1f, 0x10001, 0x2, 0x1, 0x5, 0x4, 0x3ff, 0x7, 0x3ff, 0x7, 0x0, 0x6ce1, 0x3f, 0x2, 0x8001, 0x7, 0x400, 0x10001, 0x8, 0x33f, 0x8, 0x8, 0x8, 0x7, 0x8, 0x3ff00, 0x8000, 0x8, 0x4, 0x8000, 0x4, 0x80, 0x2, 0x3, 0x7, 0x2, 0xd42c, 0x9b000000, 0x5, 0x3ff, 0xe7, 0x4, 0x8, 0x7fff, 0x5, 0x401, 0x3, 0x1e, 0x1, 0x9, 0x6, 0x3, 0xa33, 0xff, 0x9f14, 0xffffffff, 0x4, 0xfffffff9, 0x6288, 0x6, 0x5, 0x3, 0x80000000, 0xf4, 0x0, 0x1, 0x8000, 0x659e, 0x1ff, 0x9, 0xfffffffc, 0x6ce4, 0x7f, 0x0, 0x1ff, 0x4, 0x3, 0xff, 0x93, 0x9, 0xe17, 0x5d, 0xa227, 0x0, 0x1fe00, 0x0, 0x56b0a284, 0x2, 0x1f, 0x5, 0x5b, 0xffffff00, 0x0, 0x0, 0x1, 0x86, 0xc3, 0x10000, 0x400, 0x81, 0x401, 0x8, 0x1000, 0x100, 0x3, 0x67d, 0x3f, 0x80000001, 0x8, 0xffffffff, 0x200, 0x40, 0x3, 0x5, 0xc3b, 0x9, 0x31, 0x6, 0x1, 0x9, 0x0, 0x1, 0x2, 0xef44, 0x57f7134d, 0x4, 0x80000001, 0xe6000000, 0x77b2, 0x0, 0x3, 0x0, 0xae, 0x4, 0x4, 0xfff, 0x0, 0x9, 0xffffffff, 0x5, 0x7f, 0x7fffffff, 0x2, 0x81, 0x1, 0x7, 0x3f, 0x5, 0xff, 0x3, 0x1200000, 0x6cb, 0xff, 0x5, 0x5, 0xffffb6f3, 0x5, 0x1f, 0x0, 0x8, 0x101, 0x8, 0x7, 0x3, 0x1ff, 0x81, 0xaa1a, 0x1, 0x9, 0x40, 0x8, 0xf86, 0x6, 0x1f, 0x1, 0x1c, 0x7ff, 0x2, 0x1e61, 0x3, 0x4e352701, 0x0, 0x0, 0x7, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x5169, 0x4, 0x9, 0xde83, 0x4c, 0xf7, 0x7fff, 0x4, 0x6b, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x7bfc, 0x9, 0xffffffff, 0x4, 0x1, 0x80000001, 0x7, 0x7, 0xe366, 0x3, 0x656, 0x40, 0x9, 0x0, 0x5, 0x895, 0x8, 0xbf, 0x3dbd2ef8, 0x26f, 0xffffffff, 0xfffffff9, 0x5, 0x6, 0x81, 0xfffffffe, 0x9, 0x0, 0x9, 0x9]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x6, 0x400, 0x9cc1, {0x93, 0x2, 0x0, 0x8, 0x6, 0x2}, {0xf9, 0x1, 0x1000, 0x985, 0xa619, 0x1}, 0x4, 0x5, 0x66d9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x100, 0xefc1, 0x9, 0x4b7, 0x5, 0x1, 0xffff7fff, 0x2, 0x5, 0xf0d, 0x3, 0x1000, 0x1000, 0x5, 0x7ff, 0x40, 0x29a40, 0x81, 0x81, 0x4, 0x3, 0x4, 0x80000001, 0x7, 0x4, 0x80000001, 0x655, 0x101, 0x30000000, 0x6, 0xb44b, 0x7, 0xcad, 0x9, 0x4, 0x9, 0xffffffb2, 0x6, 0x5, 0x1, 0x4, 0x7, 0x2f, 0x7, 0x3f, 0xd9, 0x7299, 0x1ff, 0x9, 0x1, 0x81, 0x4, 0x1, 0xfe26, 0x0, 0x20, 0x2, 0x7ff, 0x1da00000, 0x4a, 0x9, 0x9, 0x3ce, 0x2, 0x9, 0x80, 0x9, 0x0, 0x8, 0x7, 0x1000, 0x40, 0x3, 0x8001, 0xffffffff, 0x1a, 0x9, 0x9, 0x78000000, 0x101, 0x80000001, 0x5, 0x9, 0xff, 0x1ff, 0x7, 0x7, 0x0, 0x7, 0x9, 0x4, 0x6e, 0x4, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x6, 0x9, 0x7fff, 0x2, 0xb1f2, 0x4, 0xffff, 0xffff0001, 0x10001, 0x3, 0x2, 0xffffffff, 0x1ab8, 0x9a06, 0x5, 0x3, 0x40000000, 0x0, 0x9, 0x200, 0x6, 0x1, 0x38c1875e, 0xffffffff, 0x5, 0x9, 0x0, 0x401, 0x7f, 0x1, 0xa4, 0x2, 0x5, 0x0, 0x6, 0x0, 0x4, 0x7, 0x8, 0x7fffffff, 0x0, 0x5, 0xffffff7b, 0x8, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x7, 0x6, 0x4, 0x45, 0x7ff, 0x1, 0x8001, 0x3, 0x7, 0x2, 0x1, 0x7, 0x40, 0x8ed, 0x80000000, 0x4, 0x3f, 0x7, 0xff, 0x40, 0x80000001, 0x6, 0x20, 0x8, 0x4, 0x0, 0x0, 0x6, 0x6, 0x1, 0xfffffffe, 0x8, 0x480, 0x9, 0x2980, 0x12e1, 0x7, 0x7, 0x100, 0x5, 0xffff, 0x2000, 0x9, 0x3, 0x7fffffff, 0xfffffffc, 0x7, 0x7f, 0x7ff, 0x1ff, 0x1ff, 0x81, 0x8, 0x6, 0x99a, 0xec41, 0xfff, 0x800, 0x733, 0x1f, 0x8a3, 0x8, 0xc9f, 0x5, 0x8, 0x3ff, 0x80000000, 0x9, 0xb5, 0x6, 0x7, 0x401, 0xf5c, 0x4, 0xffff, 0x1f, 0x8, 0x8, 0x9, 0x1, 0x3, 0x3, 0x6, 0x8, 0x5, 0x77c, 0x8000, 0x30000, 0x80, 0x77a, 0x12, 0x1, 0xfffff046, 0x80000000, 0x20, 0x388, 0x3, 0x2, 0xff, 0x2, 0x7ff, 0x3, 0x4, 0x3, 0x1, 0x200, 0x20]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x6, 0x8000, 0x400, 0x6, {0x9, 0x1, 0x0, 0x80, 0x4, 0x8}, {0x20, 0x0, 0xc3f, 0x4, 0x7fff, 0x10000}, 0xfff, 0x7, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0xfffffffb, 0xe1, 0x4, {0x2c, 0x0, 0x5, 0x5, 0x1000, 0xa94}, {0x1f, 0x2, 0x8, 0x2, 0xfff, 0x7}, 0x1, 0x0, 0x401}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x4, 0x7, 0xffff0000, 0x3, 0x1, 0xff, 0x8001, 0x2, 0x2, 0x400, 0x0, 0x20, 0xffffffff, 0x7fffffff, 0x5, 0x1, 0x400, 0x6, 0x8, 0xfffffffa, 0x7, 0xff, 0x1, 0x8ee, 0x5, 0x1, 0x6, 0x1, 0xfffffff9, 0x7, 0x6, 0x525e, 0xfb7, 0x6, 0x0, 0x9, 0x0, 0xd9, 0x5, 0x80, 0x8, 0xff, 0x1, 0x80000000, 0x1, 0x8f1, 0x0, 0x6, 0x1, 0x58b, 0xffffffff, 0x3, 0xfffffffe, 0x8001, 0x4147, 0x80, 0x6, 0x8, 0x452, 0x93af, 0x1, 0x6, 0xff, 0x78270c69, 0x7fff, 0x6, 0x1f, 0x6, 0x4, 0x401, 0x1, 0x4577, 0xfff, 0x0, 0x9, 0xe2, 0x8386, 0x0, 0x1, 0x8, 0x1f, 0x1ff, 0x0, 0x100, 0xfdb, 0x6, 0x4, 0x8000, 0x4, 0x80, 0xbf, 0x3, 0x4c, 0x6, 0x100, 0x9, 0x3ff, 0x1, 0x0, 0xf2, 0x1000, 0x3, 0x7, 0x2, 0x96a, 0x3, 0x87c, 0xff, 0x3, 0x401, 0x38000000, 0x1cf, 0x1000, 0xfffffffa, 0x7, 0x1a8, 0x8001, 0x2, 0x200, 0x9fd8, 0xfffffff8, 0x9c, 0x3, 0x2, 0x401, 0x3, 0x6, 0x0, 0x4, 0x1000, 0xfffffffc, 0x7f, 0x3, 0x20, 0x4, 0x6, 0xd87, 0x7, 0x7, 0x7, 0x100, 0x0, 0x5, 0x7f, 0x200, 0x8, 0x1f, 0xfffffffb, 0x7fff, 0x0, 0x2, 0xffff, 0x7, 0xfffffb72, 0x6, 0x0, 0xb4, 0x800, 0x3, 0x3, 0x2b3, 0x7, 0x94, 0x1ee44b50, 0x6, 0x6, 0x56, 0x6d1405de, 0x1, 0x7b7, 0x5, 0x1, 0xfff, 0x3, 0xffff0001, 0x7, 0xfffffff8, 0x8, 0x4, 0x3, 0x80000000, 0xc09, 0x7, 0x3e42, 0x9, 0x401, 0x10001, 0x101, 0x1, 0x10002000, 0x3, 0x1f, 0x1, 0x2, 0xaa, 0x7, 0x200, 0xae, 0x9, 0x0, 0x2, 0x8, 0x50, 0x2, 0x8, 0x7f, 0x6, 0x6, 0x9a28, 0x300000, 0x6, 0x80, 0x1, 0x3, 0xffffff2b, 0xffffffff, 0x4, 0x1, 0x20, 0x8001, 0x0, 0x1, 0x3, 0x6, 0x800, 0x80, 0x0, 0x81, 0x34b4, 0x1, 0x15, 0xdea8, 0x5, 0x1, 0x8, 0xff, 0x6, 0xfffeffff, 0x8000, 0x0, 0x7, 0x9, 0x364, 0x9, 0xfffffff7, 0xaadd, 0x7, 0x7, 0x7, 0x0, 0xd45, 0x0, 0xfffffffb, 0x4, 0x3ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0xa3, 0x3f, 0x82, {0x0, 0x0, 0x8, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9, 0x4, 0x800}, 0x5, 0x400, 0x1}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x3, 0x1ff, 0x4fe9, 0x7fffffff, 0x0, 0xfa, 0x101, 0x919, 0xf4c, 0x7, 0x80000000, 0xfffffffe, 0x7ff, 0xfffeffff, 0x55d, 0xcb, 0x100, 0x0, 0x5, 0x9, 0x401, 0x3ff, 0x4, 0x4, 0x0, 0x6, 0x1f, 0x0, 0x3, 0x532b, 0x3, 0x8, 0x7, 0x10001, 0x10, 0x2, 0x88b7, 0x5, 0x4, 0x80000000, 0xfb75, 0x1, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x6, 0x20, 0x2, 0x7, 0x0, 0x40, 0x400, 0xdbc, 0xf488, 0x8, 0x80000000, 0x401, 0x86, 0x8001, 0x7fffffff, 0x4, 0x0, 0x7ff, 0x0, 0x2100, 0x90, 0x3f, 0xfff, 0x20, 0x3f, 0x3ff, 0xdd9, 0x200, 0x8, 0xae, 0x10001, 0x0, 0xfffff93e, 0x7, 0x5, 0x8001, 0x1, 0x2, 0x7, 0x1, 0x4, 0x9, 0x400, 0x392, 0x99, 0x101, 0x7ff, 0x4, 0x777b, 0x1, 0x3, 0x3, 0x1, 0x1, 0x7, 0x8, 0x9, 0x4, 0x3f, 0x6, 0x1, 0x8, 0x1000, 0x7, 0x5, 0x1ff, 0x3, 0x1, 0x3, 0x9, 0x8, 0x9, 0x3f, 0x1f, 0x10000, 0x1c0000, 0x8, 0xf8000000, 0x4, 0x6, 0xfffffffa, 0x8, 0x27b5, 0x2, 0x1, 0x2, 0x4, 0x9, 0x49, 0x8001, 0x2, 0x2, 0x3, 0x40, 0x9, 0xffffffe0, 0x4, 0x4fe1, 0x2, 0x6, 0x1a29020, 0x6, 0x0, 0x3691fae4, 0x550, 0x9, 0x6ca, 0x1f, 0x3, 0x40, 0x10001, 0x5, 0x4000000, 0xefa, 0x1, 0x4, 0x0, 0x9, 0x8, 0x80000000, 0x8, 0x8001, 0xfffffffc, 0x4, 0x6, 0xef, 0x5, 0x0, 0x400, 0x1, 0xfe, 0x1, 0xff, 0x6, 0x4, 0x3, 0x80000000, 0x7f, 0x6, 0x0, 0x3, 0xf179, 0x9, 0x48, 0x8001, 0x6, 0xff, 0xe0b, 0x9, 0x6, 0x2, 0x9, 0x1, 0x4, 0x7, 0x65, 0x6, 0x8, 0x28ad4fe, 0x7, 0x6, 0x1, 0x6, 0xf427, 0x5, 0xb4ea, 0x400, 0x8000, 0xda0, 0x2e, 0x0, 0x0, 0x670eed2b, 0x1ff, 0x200, 0x4a4f, 0xeef, 0x5, 0x6, 0xfffffffa, 0x7, 0x0, 0x87, 0x7, 0x9d, 0x4, 0x3f, 0xffffffe0, 0x0, 0xd0b4, 0x2, 0x7, 0x401, 0x7, 0x6, 0x2, 0xfffffffe, 0x1, 0x1, 0xf6, 0x7f, 0x5, 0x7fffffff, 0x0, 0x5, 0x6, 0x3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}]]}, {0x3d, 0x6, "b62eb7b36f562ec1097d4fcefd5865c5eac1a2b97d611b1f4bfa989b5a8526dbd9542c35c4cb82d11352a916f02c7ba3cc38cd75fbedcc1288"}, {0xc, 0x7, {0x0, 0x3452e6d325118871}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x9b8, 0x2, [@m_police={0x588, 0x2, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x420000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x800, 0x10000, 0xfff, 0x5, 0x6, 0xf4, 0x0, 0xbd, 0x2, 0x0, 0x8, 0x3f, 0x2, 0x1, 0x75, 0x81, 0x6, 0x9, 0x6, 0x0, 0x764, 0xffffffff, 0x10001, 0x7fffffff, 0x0, 0x7, 0x2, 0xdc, 0x770ef0d5, 0x8, 0x0, 0x0, 0x0, 0xaad2, 0xd439, 0xfffffff8, 0x65bb, 0xffff7371, 0x7, 0x0, 0xc7, 0x0, 0x5, 0x1ff, 0x1e, 0x7ad0, 0x4, 0x20, 0x94c9, 0x3, 0x50, 0x135e3df6, 0xffffffff, 0x7fff, 0x7, 0x80000001, 0xbd6, 0x0, 0x7, 0x7, 0x7, 0x6, 0x8, 0x4, 0xe97, 0xffffff01, 0x7ff, 0xc6cf, 0x97, 0x7f, 0x3ff, 0xe00, 0x10001, 0x2, 0x2, 0x9ff, 0x1f, 0x9b, 0x5, 0x9, 0x81, 0x20, 0x5, 0x4, 0x401, 0x1000, 0x1000, 0x1f, 0x7e65, 0x4, 0x800, 0x0, 0x8, 0x7f, 0x34a1, 0x0, 0x7fffffff, 0xffffffff, 0x7, 0xcd, 0x27, 0x7, 0x2, 0x7, 0x6, 0x5, 0x8, 0x10001, 0xfff, 0x1f, 0xdfe5, 0x40, 0x852a, 0x80000000, 0x5, 0x7f, 0x3, 0x8, 0x6, 0xec7, 0xfffffffb, 0x7, 0x2, 0x9, 0x0, 0x101, 0x4, 0x8, 0x0, 0x0, 0x7, 0xffffffff, 0x1, 0x5d, 0x10001, 0x81, 0x7fff, 0xff, 0x2, 0x5, 0x0, 0x6, 0x5474a3bb, 0x31f, 0x0, 0x1, 0x40, 0x3, 0x1, 0x80000000, 0x4de2, 0x0, 0x9, 0x20, 0x2, 0x3, 0x4, 0x5, 0x7, 0x5, 0x7, 0x4, 0x7f, 0x101, 0x7f, 0x0, 0x4, 0xae04, 0x4, 0x8, 0x2, 0x2, 0x7, 0x0, 0x7, 0x1ff, 0x7ff, 0xeef0, 0x7, 0x8, 0x7fffffff, 0x5, 0x9, 0x3ae, 0x9, 0xce6e67d, 0x8, 0x2, 0x3, 0x7, 0x0, 0x1f, 0x3, 0x2, 0x4, 0x0, 0x0, 0x40, 0x1f16, 0x2, 0x400, 0x7, 0x3, 0x200, 0x1f, 0xcc, 0x1, 0x10000, 0x7d9, 0x5, 0xd4, 0x1, 0xffffffff, 0x81, 0x80000001, 0xdeb3, 0x10000, 0x6, 0x401, 0x7, 0x0, 0x8, 0x2, 0x8, 0x9, 0x2, 0x3, 0x6, 0x2, 0x1, 0x7fff, 0x7f, 0x6, 0x6, 0xffff0000, 0x1f, 0x6, 0x75da, 0x7f, 0x9, 0x9, 0x1, 0xfffffffd, 0x3, 0x8, 0x0, 0x73c, 0x20, 0x101, 0xfffffff7, 0x4, 0x81, 0xffffffff, 0x9009, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x976, 0xffffffffffffffff, 0x6, 0x882, 0xffffffff, {0x3, 0x0, 0x0, 0xffff, 0x0, 0x8}, {0x8, 0x1, 0x8, 0x6, 0x20, 0xab}, 0x7, 0x2, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0xfb, 0x6, "00b9e6c043b6fbc7a5ff16d730dae29672f7056958e050e1e270164b4977a97d06ea913a72199f9f1c9583715e5f208a800c4610e56a902b7ded8993663473e3ccc39ba366c8f6a18a9f2d7d8335a65c4f709473172fd6b4e214ca3e599913694d61580fa3f98cdd5e4b6789f5b73a8404aa3c71521766f88a4c755eb5fd1f125986e2894a4106b932adc7057170cff4d137bfea22a0a0ed22d27db7a614e237b59182c89de9f0fe3951b9d359eeb3b6183bcf90835b4571463a74dc7699f1625dfb906da3aa6119bb0dc6e81e31bfa00e8b6340ea497280e02404c71a74fc39c0fd1340740c2b8d4b6f39732cae8d838a784a787a27a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x114, 0x1b, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0}]}, {0xd8, 0x6, "deda767c10ec826f72d7ca9d487e46b857a5fc41b44e501de065c8989a07b678fa6c618f3785b6193bd176152493637d112bde5df08171a5889c86807cf865702c66fa854fa833fcd530d945d1288fe0621e4d74af60b5811bb0e5b2af06b1b9da7132d5c5c9742d3bb63500c4519a79b4df074b0e1661e0c43dbac7bb7534f283a7c5e1c82a6169335fdc095434ae4a775eac9975455f053cf55a1bee79034821a0f9bc6bd4a6cf321bfc7f2c904ca4c674c4ca4f8b6a29232aa0dbc7e0c9e294a0c37059c864274b75379a490ac235a5cb5e91"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x110, 0x15, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x40}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xdb, 0xbf, 0x0, 0xfffffffc, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}]}, {0x7a, 0x6, "5069a2abbeecdc5c13c12fedcb0fdefff12b2c1e1ed7cd3008d68c0226a051bf2676c9f22816168e59dfeabcca7512920092d563f1f27a2e48ffe5d16ce2ff759e826dd5a38bcc74fec80c8ee81565b7725ee7e1c93e82137c714baa3289b46f93191dfaa563ea51624591c62826a3022005b4139eb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xe4, 0xd, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={[], [], @private=0xa010102}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x0, 0x5, 0x4, 0x80000001}}, @TCA_CT_LABELS={0x14, 0x7, "1a80604bf4c4babecf71ae2c6aa47321"}, @TCA_CT_MARK={0x8, 0x5, 0x80000000}]}, {0x57, 0x6, "c6967903f3fcaceffaf2224bf9cc6ee73f1e3941090a3e24724882ae8649a3a280e001d9560341a7c9eacbbd240aa4501d0f777cec9633237c195322259b90f9f7486ff5f36f1452ded1fc4c7cd7afb81effac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x124, 0x2, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x952, 0x3, 0x8, 0x4}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4a, 0xfffffff7, 0x6, 0x6}, 0x1}}]}, {0xad, 0x6, "77993708ff0712644258bd57f457d1da1d35fa4ab17d81971dc51c20728ffda91a21e82d03dd1a264f32f95b111e7a80a7fb28783d65f967d252f98686dcd69dd7aa8e25a27295d15c38a8907f89c53d3974f32a8a93e7de51c088972f6ba2381e4a2d5e1a902cb8f8338d777c10e60063df3e6447fb753314a7457241fc68c102ced5711c93c0d379549aef7593ee3d12feea69876584549d7c378a329ce8e9e989888d2724f95647"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1448, 0x2, [@TCA_RSVP_ACT={0x39c, 0x6, [@m_skbedit={0x6c, 0x14, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff0}}]}, {0x38, 0x6, "64e125cb3674714d633cece54658ea5a247b87ec9eb55cf012cc9f92027cc9311d81e5979260518f0f9ca2e459ec743b52024cad"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x100, 0xf, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x7, 0x8, 0x8, 0x7d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x4, 0x2, 0x7f, 0x3}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x40, 0x20000003, 0xfffffffa, 0xfffffff9}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb8}]}, {0x1c, 0x6, "83f00f2d5df9b9bc268a925343b3a0fcfe644cdc745ef303"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x80, 0x7, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x2, 0x5, 0x8a, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x54d}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa88}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xdc, 0xa, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="48d11d4dab8d"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8001}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}]}, {0x7b, 0x6, "a5577a585e66f7b680ef6554109abec7b3e3ebb2b92cbb100cbaecbc6cd1497eee7ce8a7dc41ca8512c5cb39e9d76820988c8e48ad7489128508a1367130471da8e36e304df8bbb5b5213e5daa42ff7685e5a01e1e60c9787c564646e8323d1f1117dca5f5717ebe75f8a3bf8dde586f7377a7522ba414"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd0, 0x10, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="699e45cb1da9"}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3, 0x2, 0x10001, 0x7fffffff}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x5c, 0x6, "0bf5b12e873931a2bcd68a1b3239821b99c196b4f9b86aa49c2fc74d1fff7cd232a1c77188eb25767aa41dd1720fde7a23aa9758b265fabdaf8272e3e51cdfb0071564b2afed5f75cff657ce92ed5b2a8a9e95b5db6647d0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_POLICE={0x1098, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x2b4, 0xc0000000, 0x3, {0xc0, 0x2, 0x9, 0x8001, 0x7, 0x5}, {0x9, 0x2, 0x35, 0x4, 0x9, 0x7}, 0x1, 0x8, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x0, 0x4, 0xaf0, 0x3, 0xc, 0x2ed, 0x0, 0x3, 0xfffffc01, 0x547ab76d, 0x0, 0x7fffffff, 0x10001, 0x8, 0x815, 0x4, 0xfff, 0x3, 0x24, 0x2, 0x688, 0xffffffc1, 0x8, 0x5, 0x200, 0x100000, 0x2, 0xff, 0x5, 0x6, 0xffffff6c, 0x401, 0xfffffffb, 0x10000, 0x80000000, 0xacb, 0x2f, 0x9, 0x5, 0x3ff, 0x8, 0x7, 0x5, 0x6, 0x6, 0x0, 0x9, 0x800, 0x3, 0x6, 0x0, 0x401, 0x2, 0xb2, 0x5, 0x81, 0xfe0000, 0x400, 0x8, 0x7bb, 0x34c7, 0x2020000, 0x3, 0x800, 0x7fffffff, 0x10000, 0x2, 0x2, 0xbdd32eb, 0x0, 0x9, 0x8001, 0x9, 0x2, 0x1, 0x8, 0xe933, 0x7fffffff, 0x8, 0x7, 0x8832, 0x1, 0x0, 0x1000, 0x4, 0xdf, 0x1, 0x6, 0x40, 0x1, 0xff, 0x5, 0x800, 0x6, 0xd463969, 0x1, 0x1, 0x4867, 0x7, 0x2, 0x7, 0x7f, 0x20, 0x100, 0x3, 0x0, 0x7, 0x4, 0x67e, 0xffffffff, 0x7, 0x3ff, 0x4fcb6115, 0x4, 0x8, 0x81, 0x2, 0x3ff, 0x200, 0x1ff, 0x8, 0x205de5d8, 0x101, 0x0, 0x11c4, 0xfffffffd, 0x5, 0x0, 0x3f, 0x1, 0x5, 0x8, 0x8, 0x4, 0xf61, 0x3, 0x63, 0x7, 0x3, 0x6, 0x8af, 0x1000, 0x97, 0x10000, 0xffff, 0x20, 0x0, 0x9, 0x2, 0x1ff, 0x0, 0x401, 0xff, 0x9, 0x5, 0x9, 0xe71, 0x8001, 0x7f, 0x2, 0xffff27b1, 0x10000, 0x8, 0x9, 0x4, 0x0, 0x0, 0x101, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x4, 0x9, 0x3ff, 0xe3, 0x40, 0x8, 0x3, 0x8f7, 0x0, 0x80000000, 0x7ff, 0x4, 0x100, 0x7, 0x0, 0x7fffffff, 0x7ff, 0xd6e, 0x9, 0x1, 0xcee0, 0x10000, 0x1, 0x9ce60, 0x5, 0xa5, 0x8, 0x92, 0xfffffff8, 0x8, 0xffffbff5, 0x1ff, 0x430, 0x3, 0x349, 0x8a0a, 0x1, 0x7f, 0x1, 0x80000000, 0x19, 0x3, 0x1df5, 0x6, 0x5, 0x8, 0xf789, 0x99f, 0x1, 0x400000, 0x73, 0xafb, 0x3, 0x9, 0x1, 0x23, 0x0, 0xfffffffc, 0x3, 0x7ea9, 0x1, 0x4, 0x8, 0xbf, 0x400, 0xfff, 0x37, 0x6, 0x3, 0x2, 0x2, 0xae, 0xddb, 0x4, 0xf18, 0x7ff, 0xffff, 0x7, 0x4, 0x80, 0x0, 0x100]}, @TCA_POLICE_RATE={0x404, 0x2, [0x71, 0xf5, 0xfff, 0x9, 0xc1, 0x5, 0x800, 0x5, 0x7, 0x1, 0x60, 0x7, 0x7, 0x2, 0x7, 0x3, 0x9, 0x9, 0x5, 0x0, 0x3, 0x9, 0x2, 0x7, 0x0, 0x7, 0x5, 0x8000, 0x4, 0xbd, 0x2, 0x2, 0x8, 0xd7, 0x4, 0x7, 0x7f, 0x8, 0xfffeffff, 0x6fea, 0x5, 0x9, 0x7ff, 0x6, 0x5, 0xc1, 0xb530, 0x4, 0x2, 0x1000, 0x6576ce91, 0x3f, 0x8, 0x9, 0x4, 0x80, 0x4, 0xfffffffd, 0x6, 0x9, 0x7fffffff, 0x0, 0x8, 0x80, 0x2, 0x10001, 0x5, 0x9, 0x7, 0x23, 0x1, 0x0, 0x1, 0x0, 0x534, 0x2, 0x1, 0x9, 0x6000000, 0x9, 0x4, 0xffffffff, 0x6, 0x3ff, 0x5, 0x1, 0xffffffff, 0xff, 0x4, 0x3, 0x1f8fc, 0x6, 0x18c, 0x5, 0x81, 0x3f, 0x9a, 0x5, 0x8001, 0x2, 0x40, 0x10001, 0x2, 0x0, 0x5, 0xffffffff, 0x6, 0x800, 0x7f8, 0x8001, 0xffffffff, 0xa, 0x7fffffff, 0x401, 0x7, 0x3, 0x5, 0x100, 0x0, 0x3e7, 0x8, 0x7fffffff, 0x4, 0x1000, 0x5, 0x0, 0xfffffffc, 0x3, 0x2e, 0x464, 0x9, 0x200, 0x6, 0x59, 0x3, 0x3, 0x0, 0x0, 0xff, 0x5, 0x7ff, 0xffffffff, 0x9, 0x7f, 0x400, 0x80000000, 0x7f, 0x0, 0x9, 0x8000, 0x3, 0x7, 0xa71, 0x9351, 0x9, 0x32, 0x8000, 0x5c, 0x2, 0x0, 0x8, 0x101, 0x7, 0x0, 0xffffffff, 0x5, 0x3, 0x1, 0xffffff1d, 0xfffffff7, 0xff, 0x6, 0x81, 0x9, 0x20, 0xc86, 0x8, 0x90, 0x7, 0x0, 0x8, 0x3, 0x6, 0xaf, 0x8, 0x4, 0x7, 0x0, 0x2, 0x9, 0xffffffff, 0x7, 0x7f, 0x600, 0x3f, 0x2, 0x20, 0x81, 0x4, 0x4, 0x3, 0x2, 0x2, 0x4, 0x6, 0x0, 0xffffcc1c, 0x256a0c94, 0x2, 0x3f, 0x20a, 0x7fffffff, 0x1f, 0x637, 0xffffffff, 0x9, 0x1, 0x3, 0x5, 0xe9, 0x2, 0x7fff, 0x0, 0x8, 0x1, 0x103df3bd, 0xfffff0a4, 0x1, 0x4, 0x3ff, 0xfffffffc, 0x5, 0x7, 0x8, 0x7f, 0x81, 0x200, 0x6, 0x3, 0x400, 0x8, 0xffffffc1, 0x5, 0x5, 0x7, 0x8, 0x7, 0x5, 0xbfe9, 0x7, 0x0, 0x8, 0x3, 0xdc0, 0x909c, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0xb56811175f7a0863, 0x3, 0x7, 0x7f, {0x3f, 0x1, 0x7f, 0x4262, 0x66b, 0x8}, {0x0, 0x2, 0x0, 0x9, 0x7, 0x9}, 0x4, 0x4, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf6d, 0x401, 0x962e, 0x1000, 0x9, 0xffffffff, 0x7, 0x400, 0x1, 0x3, 0x9, 0x4, 0x6, 0x81, 0x100, 0x6fa, 0x1, 0x1, 0x80, 0xffffffff, 0x1c, 0x6, 0x8, 0xbd0, 0x400, 0x8, 0x7, 0xe0000, 0x9, 0x9, 0xff, 0x16, 0x1, 0x1, 0x3, 0x3, 0x0, 0x0, 0x81, 0xed74, 0x8, 0xe9848bd, 0x7fffffff, 0x41, 0x2, 0x5, 0xfed, 0x4, 0x80, 0x7, 0x1, 0x5, 0x5, 0x0, 0x7, 0xa0f, 0x2, 0x4ba3, 0x5, 0x7fff, 0x1d, 0x10001, 0x3f, 0x7, 0xfffffff8, 0x1, 0x7fffffff, 0x9, 0x363, 0x7fffffff, 0x1e27, 0x9b, 0x81, 0x101, 0x5, 0x0, 0x34, 0x5, 0x40, 0x1, 0xfff, 0x0, 0x5, 0x8, 0x0, 0x8, 0x7ff, 0xfd, 0xfa6, 0x1, 0x1, 0x0, 0x8, 0x3, 0x401, 0x9, 0x7fffffff, 0xfff, 0x8, 0xb200, 0x8, 0x4, 0x10001, 0x10000, 0xfffffffe, 0x0, 0x2, 0x8e48, 0x0, 0x1, 0x7, 0x2, 0x0, 0x4, 0x400, 0x400, 0x0, 0x6, 0x2, 0x8, 0x4, 0x6, 0x0, 0x7f, 0x2, 0x5, 0x40ce, 0x7, 0x1b1, 0xffffff00, 0xb7e, 0xe5d4, 0x7f, 0x0, 0x401, 0x0, 0x8, 0x7f, 0x2, 0x9, 0x5, 0x9, 0xf6c, 0x6, 0xb0a, 0x5, 0x0, 0x60a, 0x595d6638, 0x7c8c, 0x7ff, 0x7, 0x3ff, 0x3, 0x1ff, 0x100, 0x6, 0x3eb8, 0x0, 0xdfac, 0xfffffff9, 0x1000, 0x7, 0xfffff800, 0x4, 0xea2, 0x1ff, 0x0, 0x3, 0x8000, 0x800, 0x0, 0x7, 0x2cf, 0x1, 0x1, 0x8, 0xbf, 0xbd, 0x4, 0x1, 0x0, 0x40, 0xff, 0x20, 0xfffff801, 0xffffffff, 0x3, 0x0, 0x8, 0x8, 0x2, 0x40, 0x2, 0x7ff, 0x8, 0x80, 0x7fffffff, 0x1f, 0x9, 0xb5f9, 0x80, 0xffffffff, 0x9, 0x1f, 0x6, 0xfffffff8, 0xc96, 0xe2ab, 0x2, 0x4000000, 0x2, 0xffffff78, 0x8, 0x40a4, 0x100, 0xd7c, 0x3, 0xc0000000, 0xfffff66e, 0x0, 0x5, 0x6, 0x3ff, 0x7, 0x6, 0x1, 0x2, 0x1, 0x1, 0x1, 0xf0, 0x3, 0x0, 0x0, 0x7ff, 0x10000, 0x800, 0xad2, 0x7, 0x7ff, 0xe573, 0x2, 0x5, 0x7, 0x774ab76a, 0x80, 0x10001, 0x2, 0x2, 0xbde, 0x8, 0x6, 0x3, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x5f9c0312, 0xffffffff, 0x3, 0x9, 0x3f, 0x7fff, 0x6, 0x3, 0x6, 0x8, 0x40, 0x100, 0x20, 0x8001, 0x200, 0x2, 0xfffffffe, 0x80, 0x100, 0x4, 0x1000, 0x0, 0x4, 0x3ff, 0x1f, 0x6, 0x0, 0x101, 0x101, 0x9, 0xb9, 0x574, 0x80, 0x5, 0x5, 0x1000, 0x10000, 0x1, 0x8, 0x1, 0x8, 0x0, 0x1, 0x7, 0x5, 0xffffffff, 0x6a2, 0x7ff, 0xfffffc00, 0x7, 0xd1, 0x2, 0x6, 0x7, 0x7, 0x5, 0xd6c, 0x1, 0x100, 0xb, 0x3, 0x80000000, 0x8, 0x1, 0x7, 0x8, 0x6, 0x59, 0x10000, 0x5, 0x1f, 0xffff0000, 0x1, 0x1f, 0x8, 0x8, 0x0, 0x9, 0x6, 0x4, 0x988, 0x58e9, 0x401, 0x5, 0x1, 0x6, 0x6, 0x80, 0x9, 0xffff22f3, 0x97f, 0xffffffca, 0x1f, 0x1, 0x1, 0x80000001, 0x2, 0xfffffff7, 0x81, 0x8, 0x1f, 0x7ff, 0xffffffff, 0x6, 0x100, 0x6, 0xc77c, 0x62, 0x9, 0x2, 0x8, 0x10001, 0x4, 0x400, 0x2, 0x7, 0x8, 0x7fffffff, 0x40, 0x9, 0xffffcbac, 0x3, 0xfe, 0x3f, 0xa2, 0x4, 0x7, 0xfffffffc, 0x3147, 0x0, 0x4, 0x9, 0x8, 0xffffff7f, 0x71c8, 0x3, 0x68759957, 0x10001, 0x0, 0x2, 0x7, 0x3f, 0x635, 0x1, 0x7ff, 0xffffffff, 0x18, 0x100, 0x1, 0x3, 0x5, 0x0, 0x1, 0x8, 0x3, 0x1000, 0x0, 0x80000001, 0x80, 0x80, 0x0, 0x10001, 0x800, 0xfffffff8, 0x7, 0x4, 0x9, 0x0, 0x5, 0x5, 0x61a, 0x3, 0x7, 0x1, 0x8001, 0x2, 0x9, 0x3f, 0xffff, 0x1, 0xff, 0x8, 0x40, 0x7f, 0x40, 0x1000, 0xff, 0x1ff, 0xffffffff, 0xfff, 0x5, 0x0, 0x9, 0x1d, 0x2, 0x40, 0x6, 0x0, 0x8, 0x3, 0x81, 0x3, 0x6, 0x200, 0xfffff574, 0x31f, 0x0, 0x5, 0x6, 0x2, 0x56eb, 0x229a, 0x3, 0x49b, 0x8001, 0x77a, 0x7fff, 0x7, 0x81, 0x8, 0x8, 0xffffffff, 0x2, 0x1e7, 0xc2, 0x3, 0x1, 0x67d7, 0x401, 0x3, 0x7, 0xf40c, 0x1, 0xffffffff, 0xf23e, 0x6caf, 0x3f, 0xfff, 0x20, 0x100, 0x7, 0x969, 0x0, 0x9, 0x4, 0x4d, 0x9, 0xfffffffc, 0x8, 0x4, 0x7, 0x5, 0xfffffff8, 0x5, 0xffff]}]}, @TCA_RSVP_DST={0x8, 0x2, @empty}]}}]}, 0x4c9c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000801) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000240)=0x6, 0x4) [ 1332.150429][T25805] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:02 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0xc000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15:04:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000080011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1332.780360][T25843] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x2c}}, 0x20008040) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072003102030000000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000090011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:02 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1333.014651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.023098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.031531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.360740][T25882] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x7ff, 0x9421, 0x3, 0x9, 0x7, 0x3, 0x6080b206, 0x2}, 0x20) 15:04:03 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000a0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1334.118693][T25930] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000720031020000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:03 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000c0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x180000000000000, 0xac, 0x1ff, 0x3}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getpeername(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xf3b0}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000040) r5 = accept$inet6(r4, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, &(0x7f00000003c0)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='hybla\x00', 0x6) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 1334.887034][T25965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:05 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000e0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x231, 0x10000, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 15:04:05 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1336.214759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.223522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.231935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.240711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.339853][T26021] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:06 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:06 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000f0011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000340)={'ip6gretap0\x00', 0x400, 0x79}) r2 = accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:04:06 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f5, 0x8, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:04:06 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000100011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:06 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072f23002000000000000000007000000906a22cb810700fe57ea1ba29dad538eda7d82083106223703ae9a7cfa49cd2cae0a6675098c854122b6276b4d5c07f42395ab7fbf74e262ca7ec6875d3d7cc2cb34841a10908d142bd7b28784abfb52aa53df4732981ade22dda6b376e7a886bcc9e83230ba9eb1b2fe6f6e4a857d4c2e619e29e0ed8d10ca407a9a4e3d6551b54224f1", @ANYRES32=r2], 0x18}}, 0x0) 15:04:06 executing program 1: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:07 executing program 1: socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 15:04:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:07 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) socket(0x10, 0x80002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000600011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x10, 0x800, 0xfffffffd) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x6, 0xe0, 0x3f, 0x8}, {0x6, 0x7, 0xf8, 0x53e}, {0x1, 0x3f, 0xc0, 0xffc00000}, {0x7f8, 0x4, 0x0, 0x2}, {0x0, 0x1, 0x9, 0x1f}, {0x1, 0x38, 0x80, 0x3f}, {0x6580, 0x2, 0x81, 0x5}]}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0xf3, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x881) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18cd76d7aa45f4baea0000720031240700000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:07 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r3 = accept(0xffffffffffffffff, &(0x7f0000000a40)=@isdn, &(0x7f0000000ac0)=0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x124, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_TUPLE={0xd8, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff00}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000010}, 0x8850) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x16, 0x2, "81248a6bde24062f49a00ef46bf69f2cbbe8"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4b6151c8}}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xce}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x6, 0xfff, 0x2, 0x40, 0x7, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x63, 0xbe, "882a5af555e8f6febf282a509768170f9dd050755915c4bec6145ec2062c404d317f1ddf7819f0c2e02520a50abdcd00e04a94ef8886d840f73f71c40df8ee484f8254859ef73d8cfff8a92645b099eb5fe8663c40d1f3b96ab3d421c28174"}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20004802) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x8c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xff}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x2}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xbb}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x200}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x5f}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3f}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x4040001) 15:04:08 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:08 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='vcan0\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x1, 0x7ffe}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)={0x0, 0xff, 0x44, "30076ec42c001e49f4aa3daba7a05909edf0ff2ad8afb8ab9730397996099f7237af0b42a3663aa0e33a231f72872887faa6dafe46b618cf888cf2db7b883c98f8fe0ce7"}, 0x4c) 15:04:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000f00011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:09 executing program 2: socket(0x2, 0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:09 executing program 1: r0 = socket(0x10, 0x800, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) pread64(r0, &(0x7f0000000040)=""/46, 0x2e, 0x1ff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000720053786582588f2633720007000000", @ANYRES32=r2], 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xbd, 0x66, &(0x7f00000001c0)="4a011741be936f2ce2d2ead162ff6f3016c8b175bf376d998f027dd001501220cd1e79c03fb7bd80a31e96fd590b6a79d54c148921cad7179e27e4182785e6986228430454320039f7c16317cde65e9e02fef163ec53ce0730d3a5ad8689bc14ebd6a3d7391c20d5911407e6c6a034d030b3c8f2a06931dd93d50e08ed011e571f0c459739ba05772b3d723e8174607860dac7cde13c4b74bd940105ee90ce9bb1687872b4f5008daec75ec66c669f7cf00730a5a54f5ae2db1ae06913", &(0x7f0000000340)=""/102, 0x90000, 0x0, 0x86, 0x70, &(0x7f00000003c0)="79f7f49d998361310110256a5108e346b17dd7aa3e09c2e7e71cbaa543434fcf9ad5cab9821ce726eae3be5d0fe6f1b8163bea82ea7ab33824073531303a5dfa17198cc3cb4252a453f9d0354050d4a98699ff581fcdaebeeb25270c4d3ccf401aa28dcef908cfd4b1071befe261a9b15ed7d8cd3823649484708652f83af9d150e3049df92b", &(0x7f0000000480)="30029a5085569231a9a0a02d03d01b21c12e9b262464ccb6c4ef6f297facbc98ae9fe7195cdb38cbb226da7c2b0b2439a81cbb698d0bce68108519d492da60a07d383d2a2df86c688620531f6a92b55cdbebd8afc22b710fe83e2ae18f35077c83bca3bc64c4b9aee6a7bb17a44b2390"}, 0x40) [ 1340.070660][T26214] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:09 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007200310200000000000000000704003dba8bd28c01436665fc32f697d8d8bd75ff44dbb0bcfd0da3d3b8299820112b0629fcca4d5f3630e43e6f24b5b303002b4f82f04b519b6d935a59073581032e883a31895be0d67534b5b0bd27dc16028ebf115211e4e32167cc1413e4e806f26494781ea02d76494d299f4f78b0f3aeec", @ANYRES32=r2], 0x18}}, 0x0) 15:04:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000311000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1340.976879][T26243] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:10 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000511000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x404c000}, 0x8000) recvfrom$rose(r0, &(0x7f00000004c0), 0x0, 0x10003, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x954}, 0x4004001) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_batadv\x00', {'veth1_macvtap\x00'}, 0x71}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800001a30003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000480)=0x1, 0x4) getsockname$netrom(r5, &(0x7f0000000600)={{0x3, @bcast}, [@default, @rose, @null, @remote, @default, @netrom, @remote, @null]}, &(0x7f0000000680)=0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r6}}, 0x18}}, 0x0) 15:04:11 executing program 2: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:11 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="49a90000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250200000014000300ff02000000000000000000000000000114000300fe88000000000000000000000000010108000500e000000114000200fe880000000000000000000000000101"], 0x58}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x840) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@RTM_NEWNSID={0x1c, 0x58, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 15:04:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1341.814706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.823112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.831542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.839903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000611000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) getpeername(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f0000000140)=0x80) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x68, 0xe, 0x6, 0xb00, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0xc8c0}, 0x80) 15:04:11 executing program 2: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000911000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000a11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:12 executing program 2: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x3, 0x2, {0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x9}}}, 0x3a) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000007200310200001a000000000007000000", @ANYRES32=r3], 0x18}}, 0x0) 15:04:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001140)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000000000000000000000e000000700004804c0007800800040000000000080003000000000008000100000000000800020000000000080003000000000008000e00000000000800010000000000080003000000000008000100000000000900010073797a300000000014000780080001000000000008000400000000000400018028000680080001000000000008000100000000000400020004000200040002000400020004000200500001800e00010069623a767863616e31000000080003000000000034000280080004000800000008000200000000000800030000000000080004000000000008000100020000000800030000000000"], 0x100}}, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:12 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000c11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @sack_perm], 0x3) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:04:13 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:14 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:14 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000e11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x12) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:14 executing program 2: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:15 executing program 2: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:15 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000f11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) accept$alg(r0, 0x0, 0x0) r1 = socket(0x10, 0x5, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072003102000080000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xc87, 0x4) 15:04:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:15 executing program 1: setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000600)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x7, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000380)=[{}], &(0x7f00000029c0)=""/4096}, &(0x7f00000005c0)=0x78) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000008c0)=@newtaction={0x10a0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x108c, 0x1, [@m_connmark={0x50, 0x5, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x1038, 0x4, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x37}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x10a0}}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/103, 0x9}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250e0000000c00018006000200000000001c00028008000500ff000000080008000500000008000900180d000024000180080008001f00000008000600776c630008000900990000000800050003000000080006000100000c1800018008000b00736970002c000180060004004e220000060001000a000000060004004e2300000800050004000000060001000200000008000400fcff0100240001800800050001000000060002005c00000008000800ff0f000008000900530000000800060006000000046d61addfada5a0b19d489c4ceb"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15:04:15 executing program 2: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:16 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000841111000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:16 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1346.934653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.943051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.951412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.959780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:16 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:16 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000040000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24}, 0x24}}, 0x0) r7 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x40000000000024a, 0x0) r8 = accept4$netrom(r0, &(0x7f0000000040)={{0x3, @default}, [@rose, @default, @bcast, @remote, @rose, @remote, @remote, @bcast]}, &(0x7f0000000140)=0x48, 0x80000) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0xf0, 0x0, 0x40}]}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r9}}, 0x18}}, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000240)=0x60e) 15:04:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000003f11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1348.135980][T26584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000004011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1348.554663][T26590] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="ca06b026565c2fcb1de17c5a7e572ab564b3fde6bd84630f68712e5373f5", 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000200720031022cbd7000fedbdf2507000000", @ANYRES32=r2], 0x18}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000140)={0x0, 0x8}) 15:04:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000655811000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x38, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', r2}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xf0, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="e56b2ab774a6bac9000000000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:19 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)="d0a8f582f513642182fc1b895bcd975d9e118b77a30d21fd765eb788e255072515ba8d2b31f02581089e7ffad7dfca7465f48a7b85a3f53fa0947db0a54bee4b8b3ce6d7a90974a01226df410780df8683f9f468a401949cac33dc29ddd6495565f38ddc9315128346a77205945becaeb92d3b961500a8c4c61db4abcaefe78dcece", 0x82}, {&(0x7f0000000040)="6d4207ff110e47021e5cae6e1acb8c81bf35ad8703bb35734f8d15d4ef9acd969faf59caf511a188bb4a2bc75df1bebb04ce02fd0a4d164e388a58c4c0d680e01b9c8ed87b6dad8d8fa34d1b4fbd6b7e693f88f437f4b5133e6d943f1847276fbb8588e353d31245f437a9a13621bb4e987cc95f888c149f54cb60ed4fbf", 0x7e}, {&(0x7f0000000340)="f62f8ed9508f400683db680fa794c6b8acdc60203024699218ef693c1d234259b5ee854d2104a325a0095b9e597f6a112e11e9d047b0411c618f582336d6d5f3d37979f7fd97474d0c60baf872aa1ab797ce097fcf85766cf361c6842744db1592b9fe5d4f4b0b82af75d352", 0x6c}, {&(0x7f00000003c0)="784fd376035cb89efe4ac8bba5826789aa915fb42cede95d3cb179c568ce9f4ee54e77463af38c9f44b5d59f4c1b175549153952bc3a2bb567b1c6d5716ade87ada392ea2e549233ed6919d08befe0752623", 0x52}, {&(0x7f0000000140)="eec75a", 0x3}], 0x5) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 15:04:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000006011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:19 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:20 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000a89a5d0389cd24d103e520c36a9e301ddb5c33156bcfdae4c73c8b9ae862a284dcdb1c497286220013f352b707000000459edcdcc5ba2c1cb3119bf03ebbb58c3c7159769c236e446502a917", @ANYRES32=r2], 0x18}}, 0x0) 15:04:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000586511000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:20 executing program 1: r0 = socket(0x10, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x40, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wg1\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x29, 0x16, 0xffffffffffffffc1, {0x0, @ah_ip4_spec={@rand_addr=0x64010300, @empty, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xbd7e, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@empty, @loopback, 0x3, 0x5}, {0x0, @dev={[], 0xef}, 0x3, 0x4f06, [0x80000000, 0x40]}, 0x2, 0x6a0}, 0x5, [0x6, 0x7f, 0x6, 0x710, 0xb8c]}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072003102000000000000000007000000fbcb52fd120918b6e632a012a8c42f607e76e177fa5772f6fd33976872afbc4621070a7fe932f331dc92354c883db6ac4078a8c286609d267cfa0d7fcb38ce94b4bf19e9e5c26d2ee61702ffbc17b9634dfdf39a31ea3a5d34e9ed1f9b23470b2104e11deb", @ANYRES32=r3], 0x18}}, 0x0) 15:04:20 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000008111000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1351.254632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.263067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.271478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:21 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000118411000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="2e9d56f1cec0a13ccc0c9003cca138803dbc6931f426b5e39a468244aa3837b5b4da5e118d477f37312ba795a4bf4565a846357087b56cdacdae74d68b61306d73195fe44097cc92a16c5c270955e2913714d0391e538bc3d5b002a5f688cefddb0646af77fc487c3ee1b66a9d6629a88a505e730c8666e9dd0a19aa5e17332721d0abebf9", 0x85, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0xfff, @local, 0x1}, 0x1c) 15:04:21 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e02000000f011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:22 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000211000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000140)=0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:04:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) recvfrom$packet(r3, &(0x7f00000001c0)=""/75, 0x4b, 0x40000022, &(0x7f0000000080)={0x11, 0xd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000340)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c000800000000000000000062fc703b003289476d363263eb178e4ee2ca9350063dd0f1fe646273bf72d35bb38ccbbe5640a28cb556c36115e3c6cbc238838dab44e599a088084dd54a5ca8a25830b9f5593ae4896f3493a52a332138be9d5618bbf92df1"], 0x98}}, 0x0) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000440)=0x4) 15:04:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000311000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:04:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000411000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1354.774649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.783219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.791656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:24 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000072003102000000b4000000000005000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000511000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1355.356343][T26984] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1355.392785][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:25 executing program 1: socket$isdn(0x22, 0x3, 0x23) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:25 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000611000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1356.300361][T27017] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1356.325994][T27017] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:26 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x27, 0x2, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:26 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1357.323638][T27056] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1357.345447][T27056] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000811000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008000000000040000000000800000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1357.576174][T27082] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x44091) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:27 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:27 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1358.584687][T27129] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1358.606855][T27129] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1358.616521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.616809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.617029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000911000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:28 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 15:04:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x10000, &(0x7f0000000140)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'syzkaller0\x00', 0x5}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:28 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1359.270399][T27162] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000a11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:28 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100"/76], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0xa, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) 15:04:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2048880) 15:04:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000c11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r2], 0x18}}, 0x0) 15:04:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000e11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1360.669213][T27247] __nla_validate_parse: 3 callbacks suppressed [ 1360.669225][T27247] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept(r1, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000140)=[{r3, 0x8000}, {r0, 0x10}, {r4, 0x2007}, {r1, 0x10e3}, {r0, 0x20}, {r5, 0x1000}], 0x6, 0x6) [ 1361.334616][T27272] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:31 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1361.820625][T27292] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:31 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000f11000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1000, 0x20, 0x800000000000}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x8005) r2 = socket(0x10, 0x803, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x16, 0x2, "81248a6bde24062f49a00ef46bf69f2cbbe8"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4b6151c8}}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xce}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_SSID={0x12, 0x34, "5809919778ee2fcb02609ecd10c2"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048845}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:04:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:31 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x4c, 0x3, 0x3, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8d85}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffc3ae}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xc00}}]}, 0x4c}}, 0x4090) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c008881}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) write(r3, &(0x7f00000001c0)="6a928dcf6166080a3a9e68f31b060c71cfd79c9a8cacf7aa8fef1122178dd16757c1d9465f7d8264aacbf7012eaf37285520c9b73698d8050c2a5041704462ebf7cb9d86fcf5e4f9baf053c0", 0x4c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000005c0)=@newtaction={0x1a0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_ct={0x158, 0x7, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_LABELS={0x14, 0x7, "f62079128eb146181445f076e4110f37"}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0xfffffffe, 0x20000000, 0x5, 0x6}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, [], 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xbc, 0x6, "43abee961e9d3a8891ff941c5807e356237cba81d49e7005568ff88507ab0c76a1b3d9d38c9b8283827cbe360078b45ffeea6733c168000c42d137b963585456df1a90bddedac5ef14bb9acaff493203869e6fc11a290ff515679b4cb4919a8faea2ee9712a9fd560f08338819d094cd0efe591679b54f9d48f69dbc6dd8e3a54ed0deaa5b2e4e5580231d70b99770b64df9e1252574c35bc76e3f75e6708847be6c78f2c89284244901000f5de46b5247e4eb7071b7fdfa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1a0}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000001"], 0x3}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0xc000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004010) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000780)={0x1, 'vlan0\x00'}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x38, 0x72, 0x3ad542adf4d36f3f, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}}, 0x4) 15:04:31 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x0, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:32 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000001011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x0, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000006011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:33 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) [ 1364.009591][T27411] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:33 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011020002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="580100001000130700000000fd0000002001003614102c6630d27b000000000100000000000000000000400000000000000071f700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r1, &(0x7f0000000180), 0xf1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x1, "c8b787cf55d8a3f6"}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000000016ae5afee3daf8", @ANYRES32=r3], 0x18}}, 0x0) 15:04:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x0, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:34 executing program 1: r0 = socket(0x26, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = accept4(r0, &(0x7f00000001c0)=@ipx, &(0x7f0000000080)=0x80, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xfffffffc}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000340)="4b92643e9d7a8d43fbc835c2229e5198765753889fdb7afa8fadb76f564d3a32967a8ed1072fa90437f085abeb77fda7a5fe16c6779ecdc0be4ae08d39a884fc825a9b73acc4700c92b6538d0d61589b67885847629f7bab9b4b0076bbc449804bb2270c351f8392f5bcdedc2a06bab44c6963930c53121b84397f021ec5e1de", 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1801000072003182000000000000000009460f50012d651bf8c1ea0032af817927dcd5cbced18d301bdc6caba07cbaf92f6bc902a9", @ANYRES32=r7], 0x18}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000003c0)={0x7, &(0x7f0000000240)=[{0x6, 0x4c, 0xed, 0x8}, {0x3, 0xa7, 0xd6, 0xfff}, {0x4, 0x8, 0x1}, {0x2, 0x7f, 0x1, 0x3}, {0x4, 0x4, 0x3f, 0x101}, {0x80, 0x3, 0xd0, 0xffffffff}, {0x200, 0x1, 0x7f}]}) [ 1364.784924][T27436] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:34 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1365.406695][T27483] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011030002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c00080000000000000000003000020009000100"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1365.654672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.663042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.671458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.679851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.993184][T27503] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0x0}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000007a003102000000000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011040002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1366.280247][T27532] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:36 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', r0, 0x29, 0x7, 0x7, 0x8, 0x0, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00', 0x7, 0x80, 0x6, 0x8}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000004400)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000043c0)={&(0x7f0000004300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000000000000100000008000800ffffffff08000400ffffffff896483591f0b000100626174616476000008000400030000000800000700e000000106000b0018000000170001002d776c616e3147504c47504c5e3aa1292b2d00000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x7c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '..%\'\\^%\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x22}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004044}, 0x48080) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x40001) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000717213b7f22bd6e2daeb8000016b9e0000", @ANYRES32=r3], 0x18}}, 0x0) 15:04:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000fc0)={0xfffffffffffffffd, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r5, 0x4, 0x70bd29, 0x8, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x85c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) [ 1366.900261][T27544] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:36 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011050002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1367.385964][T27575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x4}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:37 executing program 1: r0 = socket(0x2a, 0x80000, 0x7f) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:37 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011060002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1367.933209][T27618] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100666f6d6e6d61726b000000000c2dcf872088422e010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c0008000000000700000000"], 0x98}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r5, 0x29, 0x3, 0x2, 0x2d0, 0x1, @mcast1, @dev={0xfe, 0x80, [], 0x29}, 0x80, 0x8000, 0x6, 0x80}}) 15:04:37 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:38 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:38 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1369.047960][T27642] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1369.082560][T27655] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:38 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011080002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x4e22, @local}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{&(0x7f00000001c0)=@ipx, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000000800)=""/152, 0x98}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x9, &(0x7f0000002980)=""/219, 0xdb}, 0x80000001}, {{&(0x7f0000002a80)=@ethernet, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002b00)=""/156, 0x9c}}, {{&(0x7f0000002bc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000002c40)=""/97, 0x61}, {&(0x7f0000002cc0)=""/252, 0xfc}], 0x3, &(0x7f0000002dc0)=""/174, 0xae}, 0x2}, {{&(0x7f0000002e80)=@rc={0x1f, @none}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002f00)=""/148, 0x94}, {&(0x7f0000002fc0)=""/130, 0x82}, {&(0x7f0000003080)=""/12, 0xc}, {&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f0000003100)=""/180, 0xb4}, {&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f0000003280)=""/146, 0x92}, {&(0x7f0000003340)=""/65, 0x41}], 0x8, &(0x7f0000003440)}}, {{&(0x7f0000003480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003500)=""/227, 0xe3}, {&(0x7f0000003600)=""/243, 0xf3}, {&(0x7f0000003700)=""/143, 0x8f}], 0x3, &(0x7f0000003800)=""/41, 0x29}, 0xfff}], 0x5, 0x120, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000031020000000000ff01000000000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:38 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x5}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:39 executing program 1: r0 = socket(0x10, 0x803, 0x40) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x4, r2, 0x32, r3}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) [ 1369.703833][T27685] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:39 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:39 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:39 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011090002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1370.204693][T27707] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x6, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000000)="7cd3d84952dd28bd032142112a682d5b7f") r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @loopback}], 0x30) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="221800000072003140243b7aff77bd39ad35309fc42b2145e0595315a72771cdb5710c895ddc093acff7000007aa3b9df77221bcce61eae040582280da63d8ab5c7dbaea5a1712cc8626f587c644b9f8d0620f172054b03eeed95b2f8ccd9e45", @ANYRES32=r4], 0x18}}, 0x0) 15:04:40 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1370.774650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.783173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.791555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.799884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.814327][T27730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8005) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x6) r4 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000508000/0x1000)=nil, 0x1000, 0x180000f, 0x4010, r4, 0xd4be000) r5 = gettid() r6 = getuid() r7 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000000)={0x3, @null, r6}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x2e, &(0x7f0000000080)=0xb88, 0x4) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r6}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18e516b8df77b1f91fafca3b1e7fa80daa00cdaf", @ANYRES32=r2], 0x18}}, 0x0) 15:04:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000000040)="9529215e7dac45e638ae972eb9eab8f439c3ff1504a6911793219fd8687c5d3d10a7d5a7987d0afc5df5c210a4372269ef6d2ce78eca1169ba57d3c745d4b10f9b05f4d1f1fb7db53e3569539091647de5637b7c891008407ca8491713563d3f0a4c888700af5c91168559cb83ea") sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) 15:04:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x6}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000000110a0002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:41 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @remote}}) pwrite64(r0, &(0x7f0000000300)="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", 0x1000, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @local, 'vxcan1\x00'}}) [ 1371.938921][T27779] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001600)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000600)={{r7}, "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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@can_delroute={0x294, 0x19, 0x8, 0x70bd25, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1}, 0x8, 0x1, 0x0, 0x0, "ed100732903dd732"}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x27, 0x33, 0x4b, 0x0, 0x5, "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", 0x1, "93bd83533115dcd5af3725d2f1333fc36cab973b"}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_CS_CRC8={0x11e, 0x6, {0x3a, 0x2f, 0x4c, 0x5, 0x2, "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", 0x2, "32aa0bf7e8487392b94d5a5519f2eb1000af449a"}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x294}}, 0x0) 15:04:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000000110c0002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1372.896962][T27835] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000440)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x12b8, 0x0, 0xb75b7103d54b980c, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1238, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3071}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'connmark\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "5878df83890e32458e73892bd5f576194ac95107fb7e4cf63fae9c0a108a066c23329a39c685afac0a88a5264075bcb6ca6d8f0976443a1e4a12369d5178537416f53e2ffac4ec3aba9acb3264d9b004b406dd42e861b1f8ce4071344ce11fdcfeac8d0d9eab73cddd50a8fb3f1f0fbf5f7d07709d90f18a22141fb3513a7255162597a246af125b75b967b5862c9c0645c9309c57a0e77b64be63c17ac1f73e9b1b604f41eb6d9246b8dad49e8041bf72d9bf7dee5ed5005b73b2960a00bf1117cc21274d5c0badc59bfb"}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "ac8aadcee364a2b563f859b089c6936591a8dc391928f9fac5ae129d6d4947c4fa668f10dede1d69e77d6c026accde3deba1c2a9b3ab1eb2058939f2b927f3c8347231d2c75be99e9096272b13547efc3cba52b8ec506213e4c9d8e01a9f7373153e26b08d709fc2a5645dac1648019490e74ed7eac5235af2c9b81cd946875a15e66d"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "2f24f964f534e058d34ff357750b7cead3a435f8ab63c474f1e17a95a303bc64351fb173171347026b1b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x26, 0x4, "b19a8e94552d775b142253f0d3d7542bc580baeb58abb5e18a9271b0525b9f5a9fdd"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x12b8}}, 0x4000000) write$binfmt_aout(r3, &(0x7f0000000340)={{0x0, 0x3, 0x55, 0x3a3, 0x200, 0x1, 0x1f2, 0x3}, "6aeb1c834ea2c39c9ef45b6f62cff284f39a580bd9f011610a0413cdefe3000a0359c74379d5ab26c078a7cf2716236f39e346133a2def0c302752b3c50fd22e53e94c3ffa8bccdeaaab9b10918cd08675c2e6ba7e2ea344c5172fdfe98ef2e993ac2dc72d79bc4e395112d21557a5cafddcf9524e3e4cb65801229eff3e5e07e2f2f101b1f0d2161ca51b3cd609156c07f20b8c77c7eaf0169adbb885d5d244ddc679bfce7481e83ca8b7817f87cd33e5fff02f67aa37bc6d322afdc242ab81e010d77bfb08a3a62c2f4c"}, 0xeb) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @default, @netrom={'nr', 0x0}, 0x10000, 'syz1\x00', @default, 0x7, 0x2, [@default, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x58}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000000110e0002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000007200310200"/20, @ANYRES32=r2], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r4 = socket(0x22, 0x4, 0x7ff) r5 = socket(0x1e, 0x1, 0x7ff) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000140)={0x5, [0x20, 0x8000, 0x0, 0x3f, 0x401]}, &(0x7f00000001c0)=0xe) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r8 = accept(r0, &(0x7f00000062c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000006340)=0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000006780)={&(0x7f0000006380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006740)=[{&(0x7f0000006400)=""/153, 0x99}, {&(0x7f00000064c0)=""/166, 0xa6}, {&(0x7f0000006580)=""/237, 0xed}, {&(0x7f0000006680)=""/150, 0x96}], 0x4}, 0x10000) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000067c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000006900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006800)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fddbdf25010000004400078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="eaff0000", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0c00040000020000000000000c00060001000000000000000c000500280000000000000008000100000000000c0006000200000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x800) [ 1373.652061][T27880] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) socketpair(0x26, 0x80000, 0x8001, &(0x7f0000000240)) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c0001000100000000000000b8bef329000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000380)={0x89, {{0xa, 0x4e20, 0xfffff000, @loopback, 0x7f}}, {{0xa, 0x4e20, 0x9cbd, @private1, 0xffffffff}}}, 0x108) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = gettid() r7 = getuid() r8 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x3, @null, r7}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private2, 0x4e21, 0x4, 0x4e23, 0x8, 0xa, 0x40, 0x100, 0x6, 0x0, r7}, {0x4, 0x8, 0x8, 0x2, 0x58a, 0x8, 0x3, 0xfffffffffffffffe}, {0x0, 0x4, 0xfff, 0x3}, 0x1ff, 0x6e6bb4, 0x0, 0x1}, {{@in6=@private0, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x0, 0x4, 0x2, 0x1, 0x4, 0xffffffff, 0x101}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r5}}, 0x18}}, 0x0) 15:04:44 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1374.589493][T27918] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000000110f0002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xca43, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x6, 0x1, 0x22953b39}, &(0x7f00000001c0)=0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x6}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:44 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011100002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0xbc}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000026000000ce0ca76d0000000000000000d653d6a961", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000040)={@local, @dev={0xac, 0x14, 0x14, 0x30}, r4}, 0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r5}}, 0x18}}, 0x0) [ 1375.243155][T27967] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:45 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:45 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1375.894735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.903228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.911572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.919955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011600002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1376.328769][T27987] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) getsockname$ax25(r0, &(0x7f0000000040)={{0x3, @rose}, [@null, @default, @null, @netrom, @remote, @bcast, @null, @default]}, &(0x7f0000000140)=0x48) 15:04:46 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0x0, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1376.887981][T28021] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:46 executing program 1: socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='xfrm0\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x2, 0x0, 0x0, {0x7, 0x0, 0x0, r1}}, 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), 0x4) 15:04:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011f00002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1377.158959][T28064] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007a0031020000000000000000070000000515090a8fe9d56a2a16ac6a03148445d108cfd38803c6c9bdb6677488716812670481acd81fac238dbd022caba783777fe16a71fc66006eda152c43b9dd2acd7e85382218d5a3a8f549d44cd6e351ef6db1ad3a04f650e06733", @ANYRES32=r2], 0x18}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="61598eba06791cefb2216d27870402b0b0b798936f3309f718bea6efb0b8a2b415f9b73972a937f88e2dc3a0895686bfe3c67693bc045cd4b95b74f89f459226874ed1b8bb0e64d4dadfd9b230dc95b432e5649cafd5f432a61d49f09c8b56e90ef0fa0ab911e9ce56f6088f1305bfac6af7e15d0643d1f4bb7f2f2764d9774ade10eba7b9d706f2b5535ffe0e055ef644f1e9e07efcbc89f71f30588991187315f54eee6544469c88d5628d24d11d2c742b3ff8fc5d119b181242522ab78ce41fd267b4", 0xc4}, {&(0x7f0000000040)="06e7027d6c68cb945afa63c8b5cc19028d26c71a00ef68712267ea95fc7e06c2ac2351e57fe4065637a4ab19a5dae49983465c808da7b762439b2ced090a636f6d77883cc4d96487", 0x48}, {&(0x7f0000000140)="01235673de5842a7f147c774a994b75e6a00c433965225f925f66cac24658ebd9f90235b56fcfc38239d07599e32dba650f055d339e9383c27543a0ac96ff7", 0x3f}, {&(0x7f0000000440)="a2bc8ec1ac7db3a04076596a49a20b149b39e58fcf5e9b6ff65c608ebe792374d2e1534aa71e8e0b24b609ff7b899f4e68b68ec5ca0f56d888089dd3b5fc7ddbeea3bc7bd6d07a1f675a6c2d15cc5d4270806d2360605650d3ebf8b86f08e8620744b3fdfde3d4be28172e308b78b559a568eab2b51d809310ada22e9f90e859e7dee11b64f61b55df4bfc19314f7753d675a907a22fd1aaeac4d29c3913549911034b93b4f2246e83aacf13ee0c20a21643f70088c70958ad53dbef019e5999b18edaee4ee1fa392bdad2", 0xcb}, {&(0x7f0000000240)="82ba0181405dde7ac90a1c6b1d9ede8baa40e315220304d2342aedbd8d8b9868d78d84", 0x23}], 0x5, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0x18}, 0x880) 15:04:47 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, 0x0, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffdb7}, 0x1, 0x0, 0x0, 0x40000}, 0x8054) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}}, {0x3, 0x3, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x1}, 0x1, 0xfd}, {0x2, 0x2, {0x1}, {0x1, 0xf0, 0x1}, 0x1, 0xfe}, {0x0, 0x3, {0x0, 0xfe, 0x6}, {0x1, 0xf0, 0x1}, 0xff, 0xfd}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x4}, 0xff}, {0x0, 0x1, {0x1, 0xff, 0x3}, {0x0, 0xff}, 0xff, 0x1}, {0x2, 0x3, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, 0xfd, 0x1}], 0xe0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:47 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:04:47 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000302e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1378.214929][T28103] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:47 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000502e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:47 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, 0x0, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:48 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:04:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:48 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000602e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, 0x0, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x18, 0x2, 0x7) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendto(r2, &(0x7f0000000340)="aa453e80f668b1de7dd8ccedb56a13cdc510d1e2fc282c9e597885d897070ab48ae1f02f3072492b604486b74b1497c510d8ac824db87f0a9a02cf1252ab46319615a0b7f73eb948f607495f8a3b7798d8a977fb41f7c02842e15fb23f093462fcee5da9b324e799724315b9ae313f230d02fd745c66bd7edae81b2f7d3431f44f79be", 0x83, 0x880, &(0x7f0000000040)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 1379.293101][T28155] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:49 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:04:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000902e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072003102000000000000000016000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0), 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000000000000063a9d5da000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000010000040006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006005d00070000000000001c25000c00080000000000"], 0x98}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2a, 0x4, 0x4000}}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x98) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x48800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_newroute={0xfc, 0x18, 0x20, 0x70bd2b, 0x25dfdbfb, {0x2, 0x80, 0x80, 0x3, 0xfc, 0x0, 0x1fd, 0xc34a81a8f064b563}, [@RTA_METRICS={0xc6, 0x8, 0x0, 0x1, "48689e1c7207ded9340aee71a4924fb47fb3dc064e8f9398b16cbf420f05d3ab58c6924742479f2e73063a444ca8c5ccf81eaba2d110cda5b900b8ca2cc41550c778b3b0922b737019c0ee6742632260508254952613d997cb0c036827f43f0f598dfc7b828f40d11243161f2cf1e537ceb42dff404a40b905647733be17047ccad8f6c09680319e5dce2990ecaadd832ee0e9f583cc28e9928b73132c61cef85dfcedcc7ba513f587e08a768ceb155ae1f4bb5162bf15d79b9f3f7f54cf0e7e3681"}, @RTA_IIF={0x8, 0x3, r4}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_SRC={0x8, 0x2, @broadcast}]}, 0xfc}}, 0x0) [ 1380.689785][T28208] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1380.715605][T28220] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000a02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:50 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 15:04:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1380.990880][T28244] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1381.014642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.023033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.031446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.039853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000c02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0), 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x805}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400d5}, 0x0) r3 = socket(0x10, 0x803, 0x7) ioctl$FITHAW(r3, 0xc0045878) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, 0x0, 0x0) getsockname(r4, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000180)=0x80) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x8, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4040810) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4004840) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x30040000) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$AUDIT_SET(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0xcd, 0x0, 0x0, 0xf6, 0x7fffffff, 0x9, 0x1c000, 0x0, 0x80000000}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x20040080) 15:04:51 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) [ 1381.810401][T28286] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 0, id = 0 15:04:51 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000e02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1382.254963][T28296] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0), 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x3, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000003c0)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15:04:52 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000f02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:52 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 15:04:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000072eb3002000000000000000007000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@nested={0x34}]}, 0x48}}, 0x0) r4 = socket(0x9, 0x6, 0x7) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x191) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x10) [ 1382.948385][T28349] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:52 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb", 0x2) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011841102e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000030000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072003102000000000000000807000000b54e4c4015fcd91a92d39f629c25a2ab2e60ffff045d454903a6e343ccf3bfa48b1b652d1d335a35576a9b6c445062038a27a167f961548a4f2dd01050a78495fc5cbf18da812607f5df9a907fab6ab54a", @ANYRES32=r3], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r3}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r4}) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x89, 0x12, [], [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x81, "d51052054a00e09316fad5d67991b807e93415a4a8874716ffe7c8addf42c5414f667bc42fbd50c868074de6c36e85177ae48308ac95e9a68e99957950c23b3a065c9a09536bcfd71c8351f63f69702e3cf0abb886fda215e37ad55819ec4547df765888eff7f8d6d8839edced2370a90d60f66f858e270a93901d955a2c38cd71"}, @ra={0x5, 0x2, 0xc8d}]}, 0xa0) 15:04:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) [ 1383.680114][T28392] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="180062d5807de33087620000000000000753bea13a27f907ce6c9dfc3bb7dc000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 15:04:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011003f02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@loopback}, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d00010063ee032fbe61726b00000000200002801c00010001000000000000000000000000000000000084000000000000041006000c00070000000000000000000c000800000000000000000030000200090001006373756d0000000004000280040006000c00070000000000000000000c00080000000000000000"], 0x98}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffd32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800c80072003102000000000000000007100000", @ANYRES32=r4], 0x18}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000140)=0x6, 0x4) [ 1383.917658][T28419] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb", 0x2) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:54 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) [ 1384.704941][T28434] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1384.738834][T28434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011004002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1385.142680][T28438] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1385.152523][T28438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb", 0x2) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1385.614921][T28472] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x240008c0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r2, 0x18726, 0xf887, 0x1, 0x80000001, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x7, 0x5, "7a16c0"}, @noop, @rr={0x7, 0x7, 0x36, [@remote]}, @rr={0x7, 0xf, 0xb8, [@broadcast, @remote, @private=0xa010101]}, @generic={0x82, 0x5, "4f1c27"}]}}}}}) 15:04:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011655802e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:55 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1385.874618][T28510] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x3, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f0000000240)=0x80) r5 = accept4(r1, 0x0, &(0x7f0000000080), 0x180800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000340)={0x2, 0x30, [0x197200000, 0x9, 0xffff, 0x3], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r6}}, 0x18}}, 0x0) 15:04:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96", 0x3) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2], 0x18}}, 0x0) 15:04:56 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011006002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18f900000001000140", @ANYRES32=r2], 0x18}}, 0x0) [ 1386.774746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.783134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.791579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.800045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:04:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:56 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x0, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:04:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007200310200000000f1aba5b9dc7224eb3b1f333692989c0e833732eb1fb4ca1cf5f9847710adf395bc55b05f291c0ab8371066be000000000000000000ebee4c5d3b3c2c41be098e8603421046baab49636a09fc3f6533dd656e1e85d67c3ddc330b000000000000000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011586502e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:56 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96", 0x3) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000720031f114dcfe000000000017000000", @ANYRES32=r2], 0x18}}, 0x0) 15:04:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="19ff01004ae8313751299878bd9f1d640200000009e320c8c768be48b03e8c015646fa1eeb3e7d3ec3b2b805e8cf4e667fe1d2deeaa252f8421745ca8e1d8d720b93beac77ca642db092b187e249e374571f5575aa1801e08e813898ed8947787dba3b77e14d924eb3e14f6ec90a85af", @ANYRES32=r2], 0x18}}, 0x0) 15:04:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r6, 0xc91add0bf88807dd, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r6, 0x0, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004004}, 0x22004000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="77b295d01a094d39aadd98e9c749024dc0aa5e895ab855a8281d60c3d10d262c76047b27c0e7a3cb02546979e22100f69d1c7fb41519a82f6d1e82784172c179f770767e0622b054c9c002ab93e85ccb9ddbe495f8edf1821748c6b0cd340148dc367f732b28189eaab69199d88557b0fec79248228b37cdd4f42bebd0ce04200b0327277d6e500e6566f9ca3c86a8f0653dd496e4f9a852db072aacc915c41355507dc205aa0ca826098c38e242d0ca34c92184bf2b62f09555d536ce5db5e8185bb066cec28520", @ANYRES32=r3, @ANYBLOB="080001000100000008000000080001000000000000080001000000010000000004080001000100"/48], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1387.767085][T28589] __nla_validate_parse: 1 callbacks suppressed [ 1387.767097][T28589] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:57 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96", 0x3) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r3, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r5}}, 0x18}}, 0x0) 15:04:57 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011008102e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:04:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:59 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 15:04:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:04:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:04:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001740), 0x8) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001780)=""/131, &(0x7f0000001840)=0x83) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = accept(r0, &(0x7f0000000040)=@hci, &(0x7f0000000140)=0x80) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x15}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x18}}, 0x0) 15:04:59 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011118402e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1389.880123][T28677] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f00000001c0)=""/168, 0xa8}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x9, &(0x7f0000001740)=""/60, 0x3c}, 0x400}], 0x1, 0x80010042, &(0x7f00000017c0)={0x77359400}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000640)={0x0, 'vlan0\x00', {0x3}, 0x6}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x4000, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) 15:04:59 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 15:05:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e02000000001100f002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1390.981569][T28704] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 15:05:00 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) [ 1391.528363][T28737] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1391.554781][T28738] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000202e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:01 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1392.253647][T28775] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1392.534660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.543039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.551450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.559869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000302e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:02 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000402e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1393.577851][T28844] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000502e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:03 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1394.023241][T28867] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000602e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1394.223758][T28893] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1394.259127][T28895] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:04 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1394.597253][T28915] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:04 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000802e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:04 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1395.620330][T28933] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000902e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1396.037543][T28972] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x58]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:05 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000a02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x0, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1396.209051][T28998] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1396.289832][T29008] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:06 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000c02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:07 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) [ 1397.574691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.583508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.591934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.600306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1398.162234][T29062] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000e02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:07 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 15:05:08 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1398.874705][T29100] __nla_validate_parse: 1 callbacks suppressed [ 1398.874718][T29100] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1398.902023][T29101] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:08 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000f02e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:09 executing program 1: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:09 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 15:05:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011001002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:09 executing program 1: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1399.845955][T29168] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:09 executing program 1: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:10 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1400.636427][T29205] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:10 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011006002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:10 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:10 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:10 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000005e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1401.087856][T29244] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:10 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:11 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:11 executing program 1: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000040e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1402.774638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.783109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.791541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1403.056155][T29289] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:12 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x7c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x68, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 15:05:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:12 executing program 1: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000081e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1403.317398][T29337] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:13 executing program 1: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:13 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x7c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x68, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 15:05:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000005e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1404.490838][T29382] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:14 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1020c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:14 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x7c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x68, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 15:05:14 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1405.093529][T29417] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1090c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:14 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:14 executing program 1: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1405.974714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.983087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:16 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:16 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e10a0c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:16 executing program 1: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1406.959185][T29483] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:16 executing program 1: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:17 executing program 1: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100708000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1408.014305][T29532] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0703"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100a08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1408.703823][T29580] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:18 executing program 2: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0703"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:19 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 15:05:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1102808000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1409.814682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.823105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.837112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1410.176173][T29641] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0703"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c03000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1411.216798][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:21 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070300"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1411.978902][T29682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:21 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e0200000000110f0002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08020a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:22 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070300"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:22 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c03000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1412.619728][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1413.257677][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1413.273780][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08030a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="070300"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1413.773175][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1413.793365][T29805] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1414.150841][T29802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08040a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1414.294622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.303030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.311439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.319830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 1414.783250][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 15:05:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08050a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1415.731544][T29855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001600)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000600)={{r7}, "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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@can_delroute={0x294, 0x19, 0x8, 0x70bd25, 0x25dfdbfc, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1}, 0x8, 0x1, 0x0, 0x0, "ed100732903dd732"}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x27, 0x33, 0x4b, 0x0, 0x5, "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", 0x1, "93bd83533115dcd5af3725d2f1333fc36cab973b"}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_CS_CRC8={0x11e, 0x6, {0x3a, 0x2f, 0x4c, 0x5, 0x2, "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", 0x2, "32aa0bf7e8487392b94d5a5519f2eb1000af449a"}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x294}}, 0x0) 15:05:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1415.904712][T29912] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1415.939385][T29912] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:25 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1415.981399][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 1416.504064][T29914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1416.522181][T29937] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1416.541646][T29943] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:26 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08060a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = accept4(r0, &(0x7f00000001c0)=@ipx, &(0x7f0000000080)=0x80, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0xfffffffc}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000340)="4b92643e9d7a8d43fbc835c2229e5198765753889fdb7afa8fadb76f564d3a32967a8ed1072fa90437f085abeb77fda7a5fe16c6779ecdc0be4ae08d39a884fc825a9b73acc4700c92b6538d0d61589b67885847629f7bab9b4b0076bbc449804bb2270c351f8392f5bcdedc2a06bab44c6963930c53121b84397f021ec5e1de", 0x80) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1801000072003182000000000000000009460f50012d651bf8c1ea0032af817927dcd5cbced18d301bdc6caba07cbaf92f6bc902a9", @ANYRES32=r7], 0x18}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f00000003c0)={0x7, &(0x7f0000000240)=[{0x6, 0x4c, 0xed, 0x8}, {0x3, 0xa7, 0xd6, 0xfff}, {0x4, 0x8, 0x1}, {0x2, 0x7f, 0x1, 0x3}, {0x4, 0x4, 0x3f, 0x101}, {0x80, 0x3, 0xd0, 0xffffffff}, {0x200, 0x1, 0x7f}]}) [ 1416.561675][T29943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1417.341440][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1417.358307][T29971] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x58]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08080a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:05:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08090a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) [ 1419.974694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.983393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.991848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.000245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c080a0a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 15:05:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1421.369806][T30116] __nla_validate_parse: 16 callbacks suppressed [ 1421.369817][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:31 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e02000000f011000002e1100c08000a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:05:31 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c080c0a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1422.241522][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1422.317231][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:32 executing program 2: setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000600)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x7, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000380)=[{}], &(0x7f00000029c0)=""/4096}, &(0x7f00000005c0)=0x78) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x231, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000008c0)=@newtaction={0x10a0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x108c, 0x1, [@m_connmark={0x50, 0x5, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x1038, 0x4, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x37}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x10a0}}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/103, 0x9}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250e0000000c00018006000200000000001c00028008000500ff000000080008000500000008000900180d000024000180080008001f00000008000600776c630008000900990000000800050003000000080006000100000c1800018008000b00736970002c000180060004004e220000060001000a000000060004004e2300000800050004000000060001000200000008000400fcff0100240001800800050001000000060002005c00000008000800ff0f000008000900530000000800060006000000046d61addfada5a0b19d489c4ceb"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15:05:32 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c080e0a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1422.477242][T30213] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:05:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1423.500738][T30230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1423.534735][T30245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 15:05:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1423.606146][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c080f0a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1424.131713][T30270] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1424.151115][T30278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1424.736317][T30273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:05:34 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08100a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:34 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1425.174726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.174929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.191433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.199818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:35 executing program 2: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c080f0a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:05:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08600a0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1426.573521][T30383] __nla_validate_parse: 6 callbacks suppressed [ 1426.573533][T30383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1426.604910][T30388] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1426.614320][T30394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:05:36 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 1427.066802][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1427.095386][T30419] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000c0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1427.539864][T30439] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1427.562594][T30444] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 15:05:37 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:37 executing program 0 (fault-call:9 fault-nth:0): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1428.270145][T30479] FAULT_INJECTION: forcing a failure. [ 1428.270145][T30479] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.299455][T30479] CPU: 0 PID: 30479 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1428.308164][T30479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.318221][T30479] Call Trace: [ 1428.321521][T30479] dump_stack+0x198/0x1fd [ 1428.325864][T30479] should_fail.cold+0x5/0x14 [ 1428.330467][T30479] should_failslab+0x5/0xf [ 1428.334891][T30479] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1428.340972][T30479] kmem_cache_alloc_node+0x50/0x3e0 [ 1428.346180][T30479] ? __lock_acquire+0xb5e/0x5570 [ 1428.351129][T30479] __alloc_skb+0x71/0x550 [ 1428.355474][T30479] alloc_skb_with_frags+0x92/0x570 [ 1428.360600][T30479] sock_alloc_send_pskb+0x72a/0x880 [ 1428.365806][T30479] ? lock_is_held_type+0xbb/0xf0 [ 1428.370768][T30479] ? sock_wmalloc+0x120/0x120 [ 1428.375452][T30479] ? mark_lock+0xbc/0x1710 [ 1428.379879][T30479] ? _copy_from_iter_full+0x24e/0x8a0 [ 1428.385271][T30479] packet_sendmsg+0x19fb/0x5290 [ 1428.390134][T30479] ? lockdep_hardirqs_on_prepare+0x511/0x530 [ 1428.396127][T30479] ? lock_is_held_type+0xbb/0xf0 [ 1428.401081][T30479] ? aa_sk_perm+0x316/0xaa0 [ 1428.405591][T30479] ? packet_cached_dev_get+0x250/0x250 [ 1428.411045][T30479] ? aa_af_perm+0x230/0x230 [ 1428.415561][T30479] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1428.420848][T30479] ? packet_cached_dev_get+0x250/0x250 [ 1428.426330][T30479] sock_sendmsg+0xcf/0x120 [ 1428.430756][T30479] sock_no_sendpage+0xee/0x130 [ 1428.435523][T30479] ? sock_kzfree_s+0x60/0x60 [ 1428.440108][T30479] ? pipe_lock+0x5a/0x70 [ 1428.444368][T30479] ? lock_is_held_type+0xbb/0xf0 [ 1428.449316][T30479] ? sock_kzfree_s+0x60/0x60 [ 1428.453906][T30479] sock_sendpage+0xe5/0x140 [ 1428.458422][T30479] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1428.464142][T30479] pipe_to_sendpage+0x2ad/0x380 [ 1428.468998][T30479] ? propagate_umount+0x1c20/0x1c20 [ 1428.474199][T30479] ? mutex_lock_io_nested+0xf60/0xf60 [ 1428.479573][T30479] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 1428.485646][T30479] __splice_from_pipe+0x3dc/0x830 [ 1428.490679][T30479] ? propagate_umount+0x1c20/0x1c20 [ 1428.495889][T30479] generic_splice_sendpage+0xd4/0x140 [ 1428.501283][T30479] ? __splice_from_pipe+0x830/0x830 [ 1428.506494][T30479] ? security_file_permission+0x248/0x560 [ 1428.512224][T30479] ? __splice_from_pipe+0x830/0x830 [ 1428.517421][T30479] do_splice+0xbcd/0x1820 [ 1428.521760][T30479] ? lock_downgrade+0x830/0x830 [ 1428.526640][T30479] ? lock_is_held_type+0xbb/0xf0 [ 1428.531580][T30479] ? splice_from_pipe+0x140/0x140 [ 1428.536617][T30479] ? __fget_files+0x294/0x400 [ 1428.541343][T30479] __x64_sys_splice+0x198/0x250 [ 1428.546234][T30479] do_syscall_64+0x2d/0x70 [ 1428.550654][T30479] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1428.556553][T30479] RIP: 0033:0x45d5f9 [ 1428.560452][T30479] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1428.580064][T30479] RSP: 002b:00007ff247e1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1428.588513][T30479] RAX: ffffffffffffffda RBX: 0000000000033a00 RCX: 000000000045d5f9 [ 1428.596489][T30479] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1428.604463][T30479] RBP: 00007ff247e1cca0 R08: 0000000000010005 R09: 0000000000000000 [ 1428.612471][T30479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 15:05:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1428.620470][T30479] R13: 00007ffdb80af41f R14: 00007ff247e1d9c0 R15: 000000000118cfec [ 1428.645748][T30440] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1428.657585][T30467] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:38 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c0800180000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:38 executing program 2: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001006395a9fba9468fe103000280040006000c00070000000000000000000c0008000000000000000000"], 0x98}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000140)=""/210, 0xd2, 0x12121, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1428.797238][T30484] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:38 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c0800190000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1429.259437][T30491] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1429.272084][T30512] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:39 executing program 0 (fault-call:9 fault-nth:1): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:39 executing program 2 (fault-call:3 fault-nth:0): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:39 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000c0000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1429.469009][T30536] FAULT_INJECTION: forcing a failure. [ 1429.469009][T30536] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.501861][T30536] CPU: 0 PID: 30536 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1429.510584][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.520649][T30536] Call Trace: [ 1429.520860][T30539] FAULT_INJECTION: forcing a failure. [ 1429.520860][T30539] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.523952][T30536] dump_stack+0x198/0x1fd [ 1429.524006][T30536] should_fail.cold+0x5/0x14 [ 1429.524027][T30536] should_failslab+0x5/0xf [ 1429.549978][T30536] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1429.556066][T30536] kmem_cache_alloc_node_trace+0x55/0x3f0 [ 1429.561803][T30536] ? __alloc_skb+0x71/0x550 [ 1429.566323][T30536] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1429.571891][T30536] __kmalloc_node_track_caller+0x38/0x60 [ 1429.577537][T30536] __alloc_skb+0xae/0x550 [ 1429.581881][T30536] alloc_skb_with_frags+0x92/0x570 [ 1429.587018][T30536] sock_alloc_send_pskb+0x72a/0x880 [ 1429.592259][T30536] ? lock_is_held_type+0xbb/0xf0 [ 1429.597217][T30536] ? sock_wmalloc+0x120/0x120 [ 1429.601899][T30536] ? mark_lock+0xbc/0x1710 [ 1429.606332][T30536] ? _copy_from_iter_full+0x24e/0x8a0 [ 1429.611727][T30536] packet_sendmsg+0x19fb/0x5290 [ 1429.616602][T30536] ? lockdep_hardirqs_on_prepare+0x511/0x530 [ 1429.622605][T30536] ? lock_is_held_type+0xbb/0xf0 [ 1429.627566][T30536] ? aa_sk_perm+0x316/0xaa0 [ 1429.632116][T30536] ? packet_cached_dev_get+0x250/0x250 [ 1429.637600][T30536] ? aa_af_perm+0x230/0x230 [ 1429.642123][T30536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1429.647423][T30536] ? packet_cached_dev_get+0x250/0x250 [ 1429.652889][T30536] sock_sendmsg+0xcf/0x120 [ 1429.657319][T30536] sock_no_sendpage+0xee/0x130 [ 1429.662092][T30536] ? sock_kzfree_s+0x60/0x60 [ 1429.666737][T30536] ? pipe_lock+0x5a/0x70 [ 1429.671001][T30536] ? lock_is_held_type+0xbb/0xf0 [ 1429.675953][T30536] ? sock_kzfree_s+0x60/0x60 [ 1429.680554][T30536] sock_sendpage+0xe5/0x140 [ 1429.685071][T30536] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1429.690798][T30536] pipe_to_sendpage+0x2ad/0x380 [ 1429.695658][T30536] ? propagate_umount+0x1c20/0x1c20 [ 1429.700864][T30536] ? mutex_lock_io_nested+0xf60/0xf60 [ 1429.706245][T30536] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 1429.712437][T30536] __splice_from_pipe+0x3dc/0x830 [ 1429.717480][T30536] ? propagate_umount+0x1c20/0x1c20 [ 1429.722696][T30536] generic_splice_sendpage+0xd4/0x140 [ 1429.728082][T30536] ? __splice_from_pipe+0x830/0x830 [ 1429.733295][T30536] ? security_file_permission+0x248/0x560 [ 1429.739029][T30536] ? __splice_from_pipe+0x830/0x830 [ 1429.744233][T30536] do_splice+0xbcd/0x1820 [ 1429.748575][T30536] ? lock_downgrade+0x830/0x830 [ 1429.753443][T30536] ? lock_is_held_type+0xbb/0xf0 [ 1429.758393][T30536] ? splice_from_pipe+0x140/0x140 [ 1429.763445][T30536] ? __fget_files+0x294/0x400 [ 1429.768149][T30536] __x64_sys_splice+0x198/0x250 [ 1429.773025][T30536] do_syscall_64+0x2d/0x70 [ 1429.777451][T30536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1429.783343][T30536] RIP: 0033:0x45d5f9 [ 1429.787240][T30536] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1429.806854][T30536] RSP: 002b:00007ff247e1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1429.815275][T30536] RAX: ffffffffffffffda RBX: 0000000000033a00 RCX: 000000000045d5f9 [ 1429.823257][T30536] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1429.831233][T30536] RBP: 00007ff247e1cca0 R08: 0000000000010005 R09: 0000000000000000 [ 1429.839207][T30536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.847183][T30536] R13: 00007ffdb80af41f R14: 00007ff247e1d9c0 R15: 000000000118cfec [ 1429.855267][T30539] CPU: 1 PID: 30539 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 1429.863954][T30539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.874009][T30539] Call Trace: [ 1429.877308][T30539] dump_stack+0x198/0x1fd [ 1429.881646][T30539] should_fail.cold+0x5/0x14 [ 1429.886241][T30539] should_failslab+0x5/0xf [ 1429.890664][T30539] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1429.896739][T30539] kmem_cache_alloc_node+0x50/0x3e0 [ 1429.902030][T30539] __alloc_skb+0x71/0x550 [ 1429.906382][T30539] netlink_sendmsg+0x94f/0xd90 [ 1429.911158][T30539] ? netlink_unicast+0x7d0/0x7d0 [ 1429.916125][T30539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1429.921416][T30539] ? netlink_unicast+0x7d0/0x7d0 [ 1429.926363][T30539] sock_sendmsg+0xcf/0x120 [ 1429.930792][T30539] ____sys_sendmsg+0x6e8/0x810 [ 1429.935571][T30539] ? kernel_sendmsg+0x50/0x50 [ 1429.940258][T30539] ? do_recvmmsg+0x6d0/0x6d0 [ 1429.944865][T30539] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1429.950844][T30539] ? __lock_acquire+0x161b/0x5570 [ 1429.955870][T30539] ? _parse_integer+0x132/0x180 [ 1429.960735][T30539] ___sys_sendmsg+0xf3/0x170 [ 1429.965359][T30539] ? sendmsg_copy_msghdr+0x160/0x160 [ 1429.970652][T30539] ? __fget_files+0x272/0x400 [ 1429.975344][T30539] ? lock_downgrade+0x830/0x830 [ 1429.980205][T30539] ? lock_is_held_type+0xbb/0xf0 [ 1429.985160][T30539] ? find_held_lock+0x2d/0x110 [ 1429.989936][T30539] ? __fget_files+0x294/0x400 [ 1429.994623][T30539] ? __fget_light+0xea/0x280 [ 1429.999228][T30539] __sys_sendmsg+0xe5/0x1b0 [ 1430.003734][T30539] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1430.008781][T30539] ? syscall_enter_from_user_mode+0x20/0x290 [ 1430.014770][T30539] ? lockdep_hardirqs_on+0x53/0x100 [ 1430.019990][T30539] do_syscall_64+0x2d/0x70 [ 1430.024418][T30539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1430.030315][T30539] RIP: 0033:0x45d5f9 [ 1430.034215][T30539] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1430.053826][T30539] RSP: 002b:00007f11eadabc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.062251][T30539] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1430.070233][T30539] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1430.078214][T30539] RBP: 00007f11eadabca0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.086191][T30539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.094191][T30539] R13: 00007ffdcfbfcbdf R14: 00007f11eadac9c0 R15: 000000000118cfec 15:05:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1430.121206][T30543] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 1430.158902][T30538] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 15:05:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:39 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c0800180000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:39 executing program 0 (fault-call:9 fault-nth:2): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1430.443134][T30580] FAULT_INJECTION: forcing a failure. [ 1430.443134][T30580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1430.509721][T30580] CPU: 1 PID: 30580 Comm: syz-executor.0 Not tainted 5.9.0-rc3-syzkaller #0 [ 1430.518468][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.528559][T30580] Call Trace: [ 1430.531868][T30580] dump_stack+0x198/0x1fd [ 1430.536225][T30580] should_fail.cold+0x5/0x14 [ 1430.540838][T30580] __alloc_pages_nodemask+0x183/0x790 [ 1430.546238][T30580] ? __kmalloc_node_track_caller+0x38/0x60 [ 1430.552068][T30580] ? __alloc_pages_slowpath.constprop.0+0x2830/0x2830 [ 1430.558890][T30580] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1430.564454][T30580] ? kmem_cache_alloc_node_trace+0x394/0x3f0 [ 1430.570455][T30580] ? kasan_unpoison_shadow+0x33/0x40 [ 1430.575763][T30580] ? __phys_addr+0x9a/0x110 [ 1430.580301][T30580] alloc_pages_current+0x187/0x280 [ 1430.585451][T30580] alloc_skb_with_frags+0x1a6/0x570 [ 1430.590682][T30580] sock_alloc_send_pskb+0x72a/0x880 [ 1430.595923][T30580] ? lock_is_held_type+0xbb/0xf0 [ 1430.600893][T30580] ? sock_wmalloc+0x120/0x120 [ 1430.605586][T30580] ? mark_lock+0xbc/0x1710 [ 1430.610028][T30580] ? _copy_from_iter_full+0x24e/0x8a0 [ 1430.615434][T30580] packet_sendmsg+0x19fb/0x5290 [ 1430.620313][T30580] ? lockdep_hardirqs_on_prepare+0x511/0x530 [ 1430.626329][T30580] ? lock_is_held_type+0xbb/0xf0 [ 1430.631299][T30580] ? aa_sk_perm+0x316/0xaa0 [ 1430.635824][T30580] ? packet_cached_dev_get+0x250/0x250 [ 1430.641354][T30580] ? aa_af_perm+0x230/0x230 [ 1430.645904][T30580] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1430.651234][T30580] ? packet_cached_dev_get+0x250/0x250 [ 1430.656710][T30580] sock_sendmsg+0xcf/0x120 [ 1430.661146][T30580] sock_no_sendpage+0xee/0x130 [ 1430.665939][T30580] ? sock_kzfree_s+0x60/0x60 [ 1430.670534][T30580] ? pipe_lock+0x5a/0x70 [ 1430.674803][T30580] ? lock_is_held_type+0xbb/0xf0 [ 1430.679765][T30580] ? sock_kzfree_s+0x60/0x60 [ 1430.684369][T30580] sock_sendpage+0xe5/0x140 [ 1430.688893][T30580] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1430.694650][T30580] pipe_to_sendpage+0x2ad/0x380 [ 1430.699540][T30580] ? propagate_umount+0x1c20/0x1c20 [ 1430.704760][T30580] ? mutex_lock_io_nested+0xf60/0xf60 15:05:40 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1430.710173][T30580] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 1430.716257][T30580] __splice_from_pipe+0x3dc/0x830 [ 1430.721303][T30580] ? propagate_umount+0x1c20/0x1c20 [ 1430.726546][T30580] generic_splice_sendpage+0xd4/0x140 [ 1430.731938][T30580] ? __splice_from_pipe+0x830/0x830 [ 1430.737163][T30580] ? security_file_permission+0x248/0x560 [ 1430.742911][T30580] ? __splice_from_pipe+0x830/0x830 [ 1430.748128][T30580] do_splice+0xbcd/0x1820 [ 1430.752491][T30580] ? lock_downgrade+0x830/0x830 [ 1430.757387][T30580] ? lock_is_held_type+0xbb/0xf0 [ 1430.762367][T30580] ? splice_from_pipe+0x140/0x140 [ 1430.767421][T30580] ? __fget_files+0x294/0x400 [ 1430.772126][T30580] __x64_sys_splice+0x198/0x250 [ 1430.777003][T30580] do_syscall_64+0x2d/0x70 [ 1430.781439][T30580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1430.787341][T30580] RIP: 0033:0x45d5f9 [ 1430.791243][T30580] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1430.810854][T30580] RSP: 002b:00007ff247e1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1430.819282][T30580] RAX: ffffffffffffffda RBX: 0000000000033a00 RCX: 000000000045d5f9 [ 1430.827265][T30580] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1430.835269][T30580] RBP: 00007ff247e1cca0 R08: 0000000000010005 R09: 0000000000000000 [ 1430.843249][T30580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.851261][T30580] R13: 00007ffdb80af41f R14: 00007ff247e1d9c0 R15: 000000000118cfec [ 1431.174873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.183286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.191758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.200186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:40 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:40 executing program 0 (fault-call:9 fault-nth:3): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c0800190000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:41 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1431.784575][T30614] __nla_validate_parse: 3 callbacks suppressed [ 1431.784586][T30614] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:41 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1432.261655][T30632] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:05:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1432.734831][T30655] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0200003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2) [ 1433.478754][T30679] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1433.496139][T30683] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:43 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0300003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3) 15:05:44 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1434.445155][T30728] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1434.790660][T30756] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0400003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:44 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:05:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:44 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1435.021709][T30771] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:44 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4) [ 1435.550940][T30778] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:05:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0500003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1436.054691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.063137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.071606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:45 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5) [ 1436.453102][T30812] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0600003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 1436.854819][T30849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1436.998505][T30860] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:46 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe) [ 1437.556413][T30870] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 15:05:47 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1438.104609][T30903] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:47 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0800003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:47 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x10) 15:05:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 15:05:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1438.289507][T30928] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1438.353740][T30936] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:48 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) [ 1438.864566][T30962] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:48 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0900003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x13) [ 1439.254641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.263211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.271690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.334051][T30974] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:49 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 15:05:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0a00003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1439.574545][T31012] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1439.608708][T31017] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1f4) 15:05:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 15:05:49 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0c00003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x300) 15:05:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 15:05:51 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x58]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:51 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0e00003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x380) [ 1442.254307][T31115] __nla_validate_parse: 4 callbacks suppressed [ 1442.254318][T31115] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:52 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:52 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0f00003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1442.454625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.463075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1442.750505][T31152] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:52 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:52 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a1000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:52 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3e8) [ 1442.944104][T31174] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.376105][T31177] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1443.835762][T31212] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a6000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500) 15:05:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x10, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1444.290095][T31230] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 15:05:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:54 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000af000003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:54 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x11, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1444.540638][T31260] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1444.572109][T31261] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 15:05:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00) 15:05:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfe6) [ 1445.773620][T31282] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:55 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0003003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:55 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x60, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) [ 1446.309669][T31322] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0005003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:56 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 15:05:56 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xff6) 15:05:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 15:05:57 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0006003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:57 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x300, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1447.574681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.583076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.591532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.599972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:05:57 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1300) [ 1447.907563][T31402] __nla_validate_parse: 3 callbacks suppressed [ 1447.907575][T31402] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1447.926505][T31405] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 15:05:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0009003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1448.484622][T31434] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:05:58 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x500, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:05:58 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00) 15:05:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:05:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:58 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000a003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1448.956024][T31473] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:58 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x600, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1449.049713][T31486] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1449.454590][T31502] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:05:59 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000c003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:05:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:05:59 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000) 15:05:59 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x900, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1450.492336][T31522] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1450.530879][T31540] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:00 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000e003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe60f) 15:06:00 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1451.222467][T31569] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:01 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe803) 15:06:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) [ 1451.751101][T31597] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:01 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000f003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:02 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:02 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a8411003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf401) 15:06:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 15:06:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:02 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1452.970414][T31668] __nla_validate_parse: 2 callbacks suppressed [ 1452.970428][T31668] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1453.334770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.343328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.351773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.360233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.462694][T31674] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 15:06:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a003f003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:03 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf60f) [ 1454.040511][T31706] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:03 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:03 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0040003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1454.544579][T31740] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:04 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:04 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x34000) 15:06:04 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a6558003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1455.177627][T31764] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1455.191632][T31770] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:05 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1100, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:05 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0060003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:05 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400300) [ 1456.313712][T31821] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1456.363060][T31823] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:06 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a5865003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:06 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3f00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1456.648271][T31859] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1456.696627][T31863] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:06 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000) 15:06:07 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0081003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1b8, 0x0, 0x200, 0x1b8, 0x0, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'bridge_slave_0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x8}}, @common=@inet=@socket3={{0x28, 'socket\x00'}, 0x82}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x3}}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bb8f5779d10bdeb8908e74d8f6ad6c6c733879d0affc77067a326413265165d1b69fde4748065f4f9002bd2b1d901a2aec3454e7415194cc6655e147c4ec52b6"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 15:06:07 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000) [ 1457.805862][T31911] xt_socket: unknown flags 0x80 15:06:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) close(r1) [ 1458.025761][T31906] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:07 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5865, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:07 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a1184003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1458.257844][T31944] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1458.464659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.473078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.481496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.489949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:08 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3000000) 15:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000000c0)=""/4097, &(0x7f0000000040)=0x1001) 15:06:09 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x1408, 0x1}, 0x10}}, 0x0) 15:06:09 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00f0003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) 15:06:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000) 15:06:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x200000000000005a, 0x2) 15:06:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1460.003431][T31999] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:09 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0002003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:09 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6558, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:10 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5000000) [ 1460.577986][T32043] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:10 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0003003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe000000) 15:06:11 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8100, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1462.043520][T32102] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:11 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0004003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:11 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:12 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x10000000) [ 1462.781664][T32142] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:12 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0005003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6558, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x13000000) [ 1463.874896][T32186] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:13 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0006003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:13 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x34000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1464.214682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.223117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.231536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.239977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:14 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f000000) 15:06:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6558, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1464.384622][T32229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x58]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:14 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0008003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:14 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x400300, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1464.994055][T32254] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1465.009559][T32261] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x34000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x40000000) 15:06:15 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0009003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1465.947036][T32292] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:15 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0ffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1466.169433][T32317] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.179339][T32321] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:16 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x80030000) 15:06:16 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000a003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:16 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0003003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1467.234069][T32361] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe60f0000) 15:06:17 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000c003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1468.248724][T32417] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:18 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000e003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe8030000) 15:06:18 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf4010000) [ 1469.603748][T32454] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a000f003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:19 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1469.974744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.983145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.991531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.999838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1470.183893][T32518] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf60f0000) 15:06:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0010003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:20 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1471.199427][T32568] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x38000000000) 15:06:21 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0060003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1471.944884][T32599] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:21 executing program 1 (fault-call:3 fault-nth:0): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:21 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1472.091039][T32614] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.168014][T32630] FAULT_INJECTION: forcing a failure. [ 1472.168014][T32630] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.182763][T32630] CPU: 0 PID: 32630 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0 [ 1472.191476][T32630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.201559][T32630] Call Trace: [ 1472.204876][T32630] dump_stack+0x198/0x1fd [ 1472.209241][T32630] should_fail.cold+0x5/0x14 [ 1472.213855][T32630] should_failslab+0x5/0xf [ 1472.218290][T32630] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1472.224409][T32630] kmem_cache_alloc_node+0x50/0x3e0 [ 1472.229643][T32630] __alloc_skb+0x71/0x550 [ 1472.234090][T32630] netlink_sendmsg+0x94f/0xd90 [ 1472.238883][T32630] ? netlink_unicast+0x7d0/0x7d0 [ 1472.243854][T32630] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1472.249164][T32630] ? netlink_unicast+0x7d0/0x7d0 [ 1472.254149][T32630] sock_sendmsg+0xcf/0x120 [ 1472.258593][T32630] ____sys_sendmsg+0x6e8/0x810 [ 1472.263385][T32630] ? kernel_sendmsg+0x50/0x50 [ 1472.268090][T32630] ? do_recvmmsg+0x6d0/0x6d0 [ 1472.272747][T32630] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1472.278775][T32630] ? __lock_acquire+0x161b/0x5570 [ 1472.283829][T32630] ? _parse_integer+0x132/0x180 [ 1472.288710][T32630] ___sys_sendmsg+0xf3/0x170 [ 1472.293320][T32630] ? sendmsg_copy_msghdr+0x160/0x160 [ 1472.298627][T32630] ? __fget_files+0x272/0x400 [ 1472.303362][T32630] ? lock_downgrade+0x830/0x830 [ 1472.308237][T32630] ? lock_is_held_type+0xbb/0xf0 [ 1472.313281][T32630] ? find_held_lock+0x2d/0x110 [ 1472.318072][T32630] ? __fget_files+0x294/0x400 [ 1472.322773][T32630] ? __fget_light+0xea/0x280 [ 1472.327385][T32630] __sys_sendmsg+0xe5/0x1b0 [ 1472.331903][T32630] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1472.336953][T32630] ? syscall_enter_from_user_mode+0x20/0x290 [ 1472.342947][T32630] ? lockdep_hardirqs_on+0x53/0x100 [ 1472.348176][T32630] do_syscall_64+0x2d/0x70 [ 1472.352612][T32630] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1472.358535][T32630] RIP: 0033:0x45d5f9 [ 1472.362445][T32630] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1472.382593][T32630] RSP: 002b:00007f5382321c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1472.391056][T32630] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1472.399129][T32630] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1472.407155][T32630] RBP: 00007f5382321ca0 R08: 0000000000000000 R09: 0000000000000000 15:06:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1472.415157][T32630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1472.423148][T32630] R13: 00007ffe76d337ef R14: 00007f53823229c0 R15: 000000000118cfec 15:06:22 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x40030000000000) [ 1472.590011][T32635] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:22 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00f0003400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:22 executing program 1 (fault-call:3 fault-nth:1): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1472.850503][T32667] FAULT_INJECTION: forcing a failure. [ 1472.850503][T32667] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.886606][T32667] CPU: 0 PID: 32667 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0 [ 1472.895338][T32667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.905407][T32667] Call Trace: [ 1472.908743][T32667] dump_stack+0x198/0x1fd [ 1472.913132][T32667] should_fail.cold+0x5/0x14 [ 1472.917768][T32667] should_failslab+0x5/0xf [ 1472.922222][T32667] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1472.928317][T32667] kmem_cache_alloc_node_trace+0x55/0x3f0 [ 1472.934057][T32667] ? __alloc_skb+0x71/0x550 [ 1472.938582][T32667] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1472.944175][T32667] __kmalloc_node_track_caller+0x38/0x60 [ 1472.949838][T32667] __alloc_skb+0xae/0x550 [ 1472.954202][T32667] netlink_sendmsg+0x94f/0xd90 [ 1472.959079][T32667] ? netlink_unicast+0x7d0/0x7d0 [ 1472.964049][T32667] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1472.969361][T32667] ? netlink_unicast+0x7d0/0x7d0 [ 1472.974322][T32667] sock_sendmsg+0xcf/0x120 [ 1472.979200][T32667] ____sys_sendmsg+0x6e8/0x810 [ 1472.984082][T32667] ? kernel_sendmsg+0x50/0x50 [ 1472.988809][T32667] ? do_recvmmsg+0x6d0/0x6d0 [ 1472.993429][T32667] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1472.999431][T32667] ? __lock_acquire+0x161b/0x5570 [ 1473.004474][T32667] ? _parse_integer+0x132/0x180 [ 1473.009351][T32667] ___sys_sendmsg+0xf3/0x170 [ 1473.013959][T32667] ? sendmsg_copy_msghdr+0x160/0x160 [ 1473.019270][T32667] ? __fget_files+0x272/0x400 [ 1473.023967][T32667] ? lock_downgrade+0x830/0x830 [ 1473.028830][T32667] ? lock_is_held_type+0xbb/0xf0 [ 1473.033818][T32667] ? find_held_lock+0x2d/0x110 [ 1473.038601][T32667] ? __fget_files+0x294/0x400 [ 1473.043305][T32667] ? __fget_light+0xea/0x280 [ 1473.047918][T32667] __sys_sendmsg+0xe5/0x1b0 [ 1473.052463][T32667] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1473.057531][T32667] ? syscall_enter_from_user_mode+0x20/0x290 [ 1473.063536][T32667] ? lockdep_hardirqs_on+0x53/0x100 [ 1473.068748][T32667] do_syscall_64+0x2d/0x70 [ 1473.073187][T32667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1473.079125][T32667] RIP: 0033:0x45d5f9 [ 1473.083130][T32667] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1473.102772][T32667] RSP: 002b:00007f5382321c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1473.111203][T32667] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1473.119192][T32667] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1473.127189][T32667] RBP: 00007f5382321ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.135189][T32667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.143198][T32667] R13: 00007ffe76d337ef R14: 00007f53823229c0 R15: 000000000118cfec [ 1473.300467][T32665] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) 15:06:23 executing program 1 (fault-call:3 fault-nth:2): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1473.724632][T32690] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:23 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000033400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:23 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1473.902219][T32706] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1473.960571][T32712] FAULT_INJECTION: forcing a failure. [ 1473.960571][T32712] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.972122][T32713] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.009700][T32712] CPU: 0 PID: 32712 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0 [ 1474.018459][T32712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.028532][T32712] Call Trace: [ 1474.031853][T32712] dump_stack+0x198/0x1fd [ 1474.036213][T32712] should_fail.cold+0x5/0x14 [ 1474.040856][T32712] should_failslab+0x5/0xf [ 1474.045295][T32712] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 1474.051389][T32712] kmem_cache_alloc+0x46/0x3a0 [ 1474.056185][T32712] skb_clone+0x14f/0x3c0 [ 1474.060545][T32712] netlink_deliver_tap+0x990/0xb70 [ 1474.065720][T32712] netlink_unicast+0x5e5/0x7d0 [ 1474.070505][T32712] ? netlink_attachskb+0x810/0x810 [ 1474.075641][T32712] ? __phys_addr_symbol+0x2c/0x70 [ 1474.080681][T32712] ? __check_object_size+0x171/0x3e4 [ 1474.085985][T32712] netlink_sendmsg+0x856/0xd90 [ 1474.090802][T32712] ? netlink_unicast+0x7d0/0x7d0 [ 1474.095777][T32712] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1474.101079][T32712] ? netlink_unicast+0x7d0/0x7d0 [ 1474.106034][T32712] sock_sendmsg+0xcf/0x120 [ 1474.110470][T32712] ____sys_sendmsg+0x6e8/0x810 [ 1474.115254][T32712] ? kernel_sendmsg+0x50/0x50 [ 1474.119949][T32712] ? do_recvmmsg+0x6d0/0x6d0 [ 1474.124609][T32712] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1474.130613][T32712] ? __lock_acquire+0x161b/0x5570 [ 1474.135656][T32712] ? _parse_integer+0x132/0x180 [ 1474.140567][T32712] ___sys_sendmsg+0xf3/0x170 [ 1474.145177][T32712] ? sendmsg_copy_msghdr+0x160/0x160 [ 1474.150476][T32712] ? __fget_files+0x272/0x400 [ 1474.155182][T32712] ? lock_downgrade+0x830/0x830 [ 1474.160047][T32712] ? lock_is_held_type+0xbb/0xf0 [ 1474.165023][T32712] ? find_held_lock+0x2d/0x110 [ 1474.169820][T32712] ? __fget_files+0x294/0x400 [ 1474.174523][T32712] ? __fget_light+0xea/0x280 [ 1474.179146][T32712] __sys_sendmsg+0xe5/0x1b0 [ 1474.183673][T32712] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1474.188730][T32712] ? syscall_enter_from_user_mode+0x20/0x290 [ 1474.194734][T32712] ? lockdep_hardirqs_on+0x53/0x100 [ 1474.199997][T32712] do_syscall_64+0x2d/0x70 [ 1474.204436][T32712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1474.210343][T32712] RIP: 0033:0x45d5f9 [ 1474.214254][T32712] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1474.233875][T32712] RSP: 002b:00007f5382321c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.242301][T32712] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1474.250289][T32712] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1474.258278][T32712] RBP: 00007f5382321ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.266266][T32712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.274254][T32712] R13: 00007ffe76d337ef R14: 00007f53823229c0 R15: 000000000118cfec 15:06:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) 15:06:24 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:24 executing program 1 (fault-call:3 fault-nth:3): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1475.064596][T32748] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1475.078065][T32750] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1475.096373][T32753] FAULT_INJECTION: forcing a failure. [ 1475.096373][T32753] name failslab, interval 1, probability 0, space 0, times 0 15:06:24 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000053400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1475.131499][T32753] CPU: 1 PID: 32753 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0 [ 1475.140218][T32753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.150311][T32753] Call Trace: [ 1475.153622][T32753] dump_stack+0x198/0x1fd [ 1475.157982][T32753] should_fail.cold+0x5/0x14 [ 1475.162616][T32753] should_failslab+0x5/0xf [ 1475.167067][T32753] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 1475.173160][T32753] kmem_cache_alloc_trace+0x49/0x2c0 [ 1475.178486][T32753] ? memcpy+0x39/0x60 [ 1475.182574][T32753] tcf_action_init_1+0x4db/0xac0 [ 1475.187531][T32753] ? tcf_action_dump_old+0x80/0x80 [ 1475.192688][T32753] ? mark_lock+0xbc/0x1710 [ 1475.197135][T32753] tcf_action_init+0x249/0x380 [ 1475.201948][T32753] ? tcf_action_init_1+0xac0/0xac0 [ 1475.207099][T32753] tcf_action_add+0xd9/0x360 [ 1475.211704][T32753] ? tca_action_gd+0xda0/0xda0 [ 1475.216486][T32753] ? bpf_lsm_capable+0x5/0x10 [ 1475.221160][T32753] ? __nla_parse+0x3d/0x4a [ 1475.225584][T32753] tc_ctl_action+0x33a/0x439 [ 1475.230170][T32753] ? tcf_action_add+0x360/0x360 [ 1475.235035][T32753] ? lock_is_held_type+0xbb/0xf0 [ 1475.239982][T32753] ? tcf_action_add+0x360/0x360 [ 1475.244833][T32753] rtnetlink_rcv_msg+0x44e/0xad0 [ 1475.249776][T32753] ? rtnetlink_put_metrics+0x510/0x510 [ 1475.255275][T32753] ? lock_acquire+0x1f3/0xae0 [ 1475.259953][T32753] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1475.265252][T32753] netlink_rcv_skb+0x15a/0x430 [ 1475.270012][T32753] ? rtnetlink_put_metrics+0x510/0x510 [ 1475.275474][T32753] ? netlink_ack+0xa10/0xa10 [ 1475.280077][T32753] netlink_unicast+0x533/0x7d0 [ 1475.284881][T32753] ? netlink_attachskb+0x810/0x810 [ 1475.289998][T32753] ? __phys_addr_symbol+0x2c/0x70 [ 1475.295017][T32753] ? __check_object_size+0x171/0x3e4 [ 1475.300307][T32753] netlink_sendmsg+0x856/0xd90 [ 1475.305086][T32753] ? netlink_unicast+0x7d0/0x7d0 [ 1475.310029][T32753] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1475.315313][T32753] ? netlink_unicast+0x7d0/0x7d0 [ 1475.320256][T32753] sock_sendmsg+0xcf/0x120 [ 1475.324671][T32753] ____sys_sendmsg+0x6e8/0x810 [ 1475.329430][T32753] ? kernel_sendmsg+0x50/0x50 [ 1475.334093][T32753] ? do_recvmmsg+0x6d0/0x6d0 [ 1475.338725][T32753] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1475.344748][T32753] ? __lock_acquire+0x161b/0x5570 [ 1475.349823][T32753] ? _parse_integer+0x132/0x180 [ 1475.354706][T32753] ___sys_sendmsg+0xf3/0x170 [ 1475.359322][T32753] ? sendmsg_copy_msghdr+0x160/0x160 [ 1475.364626][T32753] ? __fget_files+0x272/0x400 [ 1475.369322][T32753] ? lock_downgrade+0x830/0x830 [ 1475.374190][T32753] ? lock_is_held_type+0xbb/0xf0 [ 1475.379154][T32753] ? find_held_lock+0x2d/0x110 [ 1475.383952][T32753] ? __fget_files+0x294/0x400 [ 1475.388656][T32753] ? __fget_light+0xea/0x280 [ 1475.393368][T32753] __sys_sendmsg+0xe5/0x1b0 [ 1475.397917][T32753] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1475.402977][T32753] ? syscall_enter_from_user_mode+0x20/0x290 [ 1475.408977][T32753] ? lockdep_hardirqs_on+0x53/0x100 [ 1475.414204][T32753] do_syscall_64+0x2d/0x70 [ 1475.418678][T32753] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1475.424675][T32753] RIP: 0033:0x45d5f9 [ 1475.428695][T32753] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1475.448313][T32753] RSP: 002b:00007f5382321c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.456743][T32753] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1475.464745][T32753] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 1475.472735][T32753] RBP: 00007f5382321ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1475.481087][T32753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1475.489080][T32753] R13: 00007ffe76d337ef R14: 00007f53823229c0 R15: 000000000118cfec 15:06:25 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x300000000000000) [ 1475.734685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.743123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.751525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:25 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:25 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000063400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1476.327820][ T331] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:26 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000000) [ 1476.751431][ T342] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:26 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:26 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000093400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1477.244771][ T370] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500000000000000) [ 1477.729743][ T394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1477.752136][ T397] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1477.785928][ T394] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:27 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000a3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:27 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:28 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe00000000000000) [ 1478.430526][ T428] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1478.463312][ T430] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000c3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:28 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x10000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:29 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000000000000) 15:06:29 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000e3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:29 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x11000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1300000000000000) [ 1480.310583][ T521] __nla_validate_parse: 4 callbacks suppressed [ 1480.310595][ T521] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1480.350427][ T522] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000f3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x20000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1480.934709][ T529] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1481.105968][ T580] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1481.150405][ T583] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:30 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x21d6c9c8, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:30 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0084113400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:30 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) [ 1481.494615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.502978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.511403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.008318][ T609] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1482.025561][ T583] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:31 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3f000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:31 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000000000000) 15:06:32 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00003f3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1482.954589][ T644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1482.964051][ T646] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1483.002123][ T649] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:32 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x40000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe60f000000000000) 15:06:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000403400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xe803000000000000) 15:06:33 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0065583400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:33 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x60000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:34 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x65580000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:34 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf401000000000000) [ 1485.344633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.353186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.361617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.375352][ T763] __nla_validate_parse: 5 callbacks suppressed [ 1485.375363][ T763] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1485.409705][ T778] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:35 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x81000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:35 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000603400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:35 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x58]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1485.903363][ T814] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1485.913618][ T816] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:35 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xf60f000000000000) 15:06:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:36 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0058653400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1486.316597][ T816] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:36 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x88a8ffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:36 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffff00000000) [ 1487.114533][ T863] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.124318][ T871] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:37 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000813400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1487.514583][ T877] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:37 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9effffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:37 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1487.696195][ T917] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1487.733639][ T922] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:37 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffffffffffff) [ 1488.534719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.543114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:38 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:38 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0011843400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:38 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc8c9d621, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:38 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = socket(0x3, 0x1, 0x5) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000004340)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004300)={&(0x7f0000004200)={0xd8, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xbb, 0xac, "f2ffb89ff8c55d7513472735db5fdf15a44bf0817ae2aae29ebcdd0f0b8d5076ad4fb7a358524b02696e7404f1cfc24ab50dad0492eb144d36ae9df323a4bee6ce438d1d95464a6b832356f7eb911d2c046a070329d27ff42f4e4af66c87d5020e4d0eb713856412bc89f5b43f9f248c1765b849d44bd3bd3617cf2503e5e2d5d212f674ef874b08cc1d4e7093c1d04ae6ac4ecde069a9a07a4c1f8ed24ad9e171098d2fd378cadcb92c857d5bcd48abb658890717e989"}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20020085) 15:06:39 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000f03400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:39 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:39 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0ffffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:39 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:40 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000023400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1490.475976][ T1026] __nla_validate_parse: 6 callbacks suppressed [ 1490.475988][ T1026] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:40 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffa888, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:40 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x10, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1490.945735][ T1068] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1490.993502][ T1075] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:40 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) r4 = socket(0x10, 0x80002, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000040)) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind(r4, &(0x7f0000000200)=@x25={0x9, @null=' \x00'}, 0x80) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) read(r5, &(0x7f00000000c0)=""/46, 0x2e) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000500050000000000050006000000000008000300fa23ceea4ab483fce1ba9278cf6fe100000000"], 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00ec2cbd7005fedbdf2504000052296dd300000000000000000000ffffffffffffff0400060009000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000101) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:40 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfffff000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:40 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000033400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1491.100257][ T1075] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:40 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x11, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1491.617781][ T1106] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1491.633330][ T1120] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:41 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r4 = socket(0x9, 0x800, 0x3d6) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r5, &(0x7f0000000100)=[{{&(0x7f0000000040)=@caif=@dbg={0x25, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)="ecc3e7891194892128fed5c10ac55c823fa1e1cea1dd0a782fe054e07e887ae0a456a48f79be72a92b836853f7b454843a2954c960604307c876019b5ec4205835fb827702eed968751c9e5f5bf614409631869e952d06cfa0ce040589d2ed5bc1045c8ad66c55f0aec01db935441555c102d438d7dbf14b51daeb2110c3fec8977cc9a24b2fcd38fc6e43368578156667e481f4d23d1c8a284a66f6adadb2365fe19fcf44a0ce65baf9a0f939cbf69a3ebf9710dc7c2ad3ba55cc3793806b3debec6d19759ca3e63a0c14d61d48", 0xce}, {&(0x7f0000000380)="721fe5214b743ff6eaec6386742f3bd6c96d94897aea23417533bba5665d2344c4ba3afe36fabda5f38fc62207dffbeb0345430a4f6c55ba23e20c616368b5eb9f50df53d258e6e6aa03bcfe07eefac791e16b640ec1a79bda3b6f1aa0f5f619c9a96a5c6e256a79b562fa5ce18ce99be875c90b3e35fff7fcc6392b5659fe4f0d577cf618d0eb42902b3534b4e6a8ab2c2c16beb7f1d513911df58b15e382622f0ca790cfdd8dfcef56", 0xaa}, {&(0x7f0000000440)="61bc0f38eca8b1870029d39316304bfcbd301a9a4af0c99e10191076b0619f55a0b1904d83a446d9b920fe7c9600977b840ebc26f19da74c23301e9ea2fca3513da330f0f6cdefe98ef7551e11a4015f7f07912e6e48c7c20872ee5369ca0f829dae11265d4b31df2a097d821cd04fe603aec7fd591c05351ad39d7f8c5de239f109871cb8e4737a01b040", 0x8b}], 0x3, &(0x7f0000001500)=[{0xa0, 0x100, 0x2, "c401acd715f69e2552c4ac8d12d5179cdcf581e73c41119c11841b9a1d2762ee9a49cd2eb7021d201624cd9f59ce5c168a3fe672abe9801ae41d6fb3856105a76053db2638bec6722446c2379668118039f9ea185135fb9037264a8cfacdf3c82f20b567719c7e06f587d806be86660379091065434eb702109ce664014c08f48fc9a0d52e74f56b54f3"}, {0xc0, 0x118, 0x2, "d50b57b39537e216eb18d24ca859ee038220d285d7451318b1c70afc3dd2f03c57d741b9a7fea50528cda9e134dfd1403f2268002817835bd0ba7795fb04e03189ef4325e80592931a2f894d6a5253e478c97d011d638f67cc9dbcd39bd4cd3e78c628d8d330c81f2c94619e4ebb060dd7c49b06272eb240a4ce99b670ff0dc1ad333f90befd37cc7333208bdcd3df6e4ac2b540d8e84e882fa6a14d12dcbe01ea5d697a435ae887d9570557d430"}, {0xc8, 0x103, 0x2, "f78fb172fc1a77be3399222e2810e51216e93a6a661fa3edd4503de98afeb72cf85edcb470cafaf1d78b3d73fc0e5182711bf48c6df3be72609f2f43ebac845b2d0c8a3ef387c5660e5acb4f6aa40083190765af8e491661e409c03d5c40630f2caacfc321bcea0bf90d35b608397420c04197e78a3ac1463f0562a275b63791adda54aa0a0872e7718a1e253043b1ce4b9a5888ae0c7a91922944e4d6785215376008426e68ceeae410450110d989800474eae003"}, {0x30, 0x115, 0x0, "beed1c7def95a3da17b1d9241b0eb95c21896c90a1285f52778cbdb5dc3ed023"}, {0x1010, 0x117, 0x0, "9aa8b9ee9fe6a7a534dcbb20af5b4b5fcc965b83cb76a16b4dd1060815d06491d4b83426e95a7ab10a1a7673a9f18db4d1bf74f2d49ef7e82d861760e706df2ee6ed4f6ea699d4535a4c77fe3df8b2f4f4ac5398c9aeaa50ce327fcb54656a5ce1ba13615b5f09bd32b4ea91cfadfd25d4ccf0952cdc97eb2b879ea878626896df9af764a7cd5ddd1f72ffe4d7245ca877132b3ee03f33a6264510f09aa00494f607733e5c1a38deb6cee473abdda15c66f673195ce0c31b2a3c5f0ee4ba509de9dcda1bb98f3e2e09acb19c5d6c500ab6951c4723f13a480e7028b2f4f6ca467bd5bf652109498c96fdb2cf67e41a3a1ada4c3291142ddb01018ca60990db67cfe39ee2d1633dc3a1f37d9ee83ecec5bc9bc61c7e07b24561087890eeedd41187a56a8b4ceba335cdeb1fc20e22a8282ddadf62d92aff484bc18b75816b9fc0f3627e712aa1122b08b963eb3f5651a1e326c538bc2ec87bf4a75e53bd3fe20f5e6ef0ae81518701552507afffca9e394d41d1e3821056996fa5b105098de0974702f5017b3ef2812695edbe4b6636b9d3c824f61bd3c6bbbad4e2c9dfc9fbe8e5eb0f398f63b04f9bb2b204af0d00a4c43af31fc3b7474569f4c16b3811ecfc27b6601819dffaca81dacba925459e5a5d27391b7ec9bce8fecdce6d8769655e3f6d9d55bc44b17cdff6fb63743b36cfa91e4b759cb3b723e04008ba424e55a5593f0b90e46060c73389b098219b2204acb3b91635e79b9ecce461e66dd322de0abeac9fa5fe0b2730420c32035d28f029ee216eac0ad8bfb3bd80c39c26d4824c49e898bffab46bd9edeaeac8f9f75d76d0a04e95beb9b73e544ebd403b94eb4a9c15651e64d4fd57b0c80eaf089eafa6b9f2bc2522bdd4d35b2e1c80635b72f18168bb3dfdc261b3e5195bf79742b156bbf5ca9f722620073ef6d5c52a941da62237cb90f027200831d320c191beef943883d9e73ab37f821b7e07691a69e15fd79b4f7ecd757af9548691183536c1c9184b8cf4b1cb25521f82430b8ddc7ef4558be1e9dca6dc5bfdb1a691e311dd716aab7e95f0ead8c1efe7950378cf2dd71c5da790d5916df2c5b4b398e4abbc9bcc596770a77c8a049398945371380ce186cf73a67316a54a7d80be52beded9742605d091e0471a9858f50029cda3a3c5e8544378f6966ebd658de7a8b760ee5c997b7aadecd5b56c6593f47aa460c74014b372b2d2825baabbf237fb0e00518710b9936cd1a93505cf40b6fb8319265510453ea7c8588abff31e3c3e298b894dd1e441e63c450e223e5a9ac697583513d52d1f6bb29d2fda6a29352c16cc78436c5af3f9586b1bc76785905fa4a11c5e84e7052b6f3b09a589ca7ed10853b72330ba1e60d566e420aa59901ef8cd7dc4be19c6cbe632f2bb40ddcea94246af47184ba7b5af9761b13dc7906f8dcbf6c881a43be1463f868b74f497a3031d9467cb3c205fd81afa62b330ecc484e0d372fce572476a72fd65cf3cbddaf2cb96341ba24e3c625c147219eb0727b81c1e47127cc114435c261193bc693b5f9d4dc2115ef0f6301977afc520cf36fe5cba2e672960da0db4093e1dfeb48f9da90c7bfa2ae85a4d714e3f0ba15f0a1eed0b0f33b05e9278f8da781102441323744214767ff1487f880b4840b7bb6213abd8d2356aa33b9aa81ffb0d292393bef4ce06b423c2de2569dc8428286a71c001171558d17958cd56c3cc90753498fe5347d550400c27e8440f64d3a64be12d7b45398bebf81c22371ac93905512760aa2339b988b939f2073a31b116a2f93e5fecd27ee4dc98dccf9f92845e88222d7c602f4b5b8c7595c5c2a10a7b5eb10ce57c6b031abbedd452134ee8454822fb45a9ebbe88d9241390c51de813474ab670bfebbffd8b2ae33fb71224bf7deb38958d89f29112b2ff1b1d16f928bfe20b8c75691fb8efc6879d0b3d6478b8b4e1baf78787cf9a075798b99cd7b15126c7a98a924a6ed15c70f3bcccbfcaf41de9f862321504413ed99290326d112c12b7c7392b69b9f8e7dfee4570d5285f72c30108714eaf1790114f14858e01a3c7f38535e2b926d69560801397765f247972128927ceeb3e4a01035b920d4671b8b224a9581b8ee7d47f730302830fe5756db6c8171dccd13561305a5924d4cce87f96bdf967d9f46bd721e1a55be742b9c6b7a2592d72dd3404f897061715be2dc34adae5165086fcb19e6a4b6c884d6605c408ac26227b9054b972bea8786341ef790967058454c057064b06fbb6bd8a9166b7d83767b23ac144f0f5d9b42f0ab72f5e0e2e2d7258f185a7920a90ccc3ff9ff441a64017c7e08200bf6d503d3c94b42df46cfa17057a54fd89d9958c43f25ddda63498aa33b98565d5b8c7f1ac3a073f74aed718849affa423efd74d8caf048a4a8a5aaf2801579e0a91a55e5dce7e30709bae8a25451a8e3183439040700000300da2802406afc01f39d66a42677d21bdd72d7eb742db7c6d95515a952cf5391fd80cd6675c8bbb44b93e72f8214589fd81c0086bdd812b678247688add4e9d721c2ab719d5b3a60acdc55803bbddcdfb2ba6caab8bc7c4277c4caebc810b1f2a2522786e40c0033df1b7697ae14afd93981f3e9dc86e82acc4f9a0c4eb13b3c3f0bfbe46c79137fd1c9eb0fce97e3836bc13008e0a61d7755362d65d86175eaa6abba2071db426b10d6842d8a87b0bf85b612eec1af4d1e904b67338823ea0eb7c451e2a953f72e59c21e042b3b2489da3c0c28e727097899535b22a42c7913205c08918a0b8159d4caeb95819256ea903792037c60d94028349594018c605b73f35b6e2bdfeb765e3d46957eafb924b9edffff117c27c80e92df4543bc9b037c1196b5749d20ee97fc163115c6621a2d9d0f4b656a2fb906c19b036f929b7d7ad995119bbf206ba68260f5c1012305799f3c0189ae94b1d69f13ecb1544059be769f0ccafe65ad16eed0460e02a633ab80df7f8e144c3864dd62dd731aa611a606a55a0ce22c8a78090e21f5aa90c1b9ce42a9668a93692e45f5776b38cd766a99a480486a268ee8a118f9aa761fc75fbf0b754a588ff93395ace479cb028311ad7f182a58cb27a6268f763b28ba6a670d0057530e1466d9c5aab71a86b8b800555fb84d36366713ec43f6959a1d6bf6078197b9d474a1f2d1872b8f80d6614ea1b4100bac6cc0253c086eef546ba71b2563a3136bb8790fa6f185cb5c8a2c7e34912b8767d983447dada2e5b7b3e5f0ed99d0656eef5fec0cc4d1316e6b0abfc89f8f60ef4ad8d35cb767fb42a99538638bf9634492489fdf8667f5c10423ef91a17c6c85a0884f3d434a6493701ddc8652032a82b53f022c88230561a4a3b478f7554839c887cc4bfcf4e1dbaa8e3db68d63221fa894aefe81bbf6ef71b294554fd004a0eb304583d6312548087020d7346d3cc4bc9e43b38ce11a5c78c2297735ef714a8c6f14aa3d5b0929944c1515874b9f128397773022ce377654e96652f17cd0767de620b4c5695efe1a2489305e405e5aad8b9d31422c681b74b407a0380372fc4f858876ff11a340305c27518075bf48cafd1b8c6f9082c963137b7d181d070a8a124b2dab2cc0efd654588a6d785280d062d6afa041df6edad432098f23dbf6c8b42ac792566398590b4251cc0be03a3f730d68e0b8f45b9e1d9893d1a7d94ecaf085e6750517bee5ce11df80b2f8945daf2b2e828706ff96ec2f634bc6a05b715d3b186dadf9677bc230c3c46cbf67f2df59675f6c977d491567d2c82912528b4f271fe442bd29e4eb41d056d98e9952b1df697097856591c6f6cfd40f5ba271c38d13f99af3b090145308f6b403bd72f13c8777a065af4b4a42ba6f843dcb9d0b9075522868c8380eb7b8fc57f773efac3c262c30a21c6484be3dc0a6ba74d9962cb63afc9287d2d4630325725bf2f5732b356b78ecb5d352099679aade8a7061139af29ab93d33ca208bd46b2b1b6163d7f5d4c5b379a7e6b9b832aaae88e7e44f2a9645ebecdac0dbc39138f84098cb85a1f321e749f997acf661d7b85d0a54af05c7d01d5002b9330c46e51381c7da97876c405191db6402a30b081ac217922cd8c1784ebad587d9c933a1358fbb5d59fff9af1c64722b9ac043255c0a30c62c00cf4abf31128188e3cc2b7db4ab1b2ebd77ea03c14dd48ce34cc35f2f11a1ff12b3d52b05836e5d48c30e9210e173f015470efc9854549d5a5e3efddc454f3d397c598c002d78f0d02d91a3d6504bfa12315907ea8adc63f798f108e2b4253012575178ba9c955bf29afd7b67132d49a9a745490b4a0c4b98f296cce8520a2d588064928101e86780e218cd6211e7a146592a010e26aa1d11f8b4e1a9019218ad6f23b3cdae2127180881055c04852591470e516090d27103c7042547d6114284b3966217a620f93d7c1110735a15d10e964a9970737e264b294dffad9412f842b43d3037f623ee601b5d98fb34fe31cd2a90e7199f179158ed0f980e33d624fc566d37656fc48d66dc336f8b7d3e2f1cc9c3a64d4ebb155a9b957a38a52101a3b29f98f98f6fb41d964557acde3cc081a9bac4c1e1a2c1991f736a036e1c8c6dc33076686a951861b71da6e0ab9ea69c9603d6c525854bb9094fe42f25875bee64ee72fcd5dcacbad1179a5b94839ea0a9ecb71a8193553ff1f6afed3aa03143449b05d92f9d05325d06543fe99e91a508f613ddcb54a2d7151fd46a6da26d036ec1f2491cee531979e028c1453dc834ee114028525c6ee7beb305eee2214b508dd9863434f3e5968623072abaf156adfda05c4579afc772d85a9b90e46db0d3a94f87dd3a9409fab6445961017c08dd0867b6d82eafec211ac9e680ef7418d813068db1da7adb2281e55030c9c988182e3da7310d1cbaef3e848069d01c43f6ecd713a90681c75c3fbf2742134cb87de41421646d8202cf15b1077f4efb0591f9e875aa59cb7bf54a45031560c80c860cdf94f893f5555b871317d7a6d7af75d74534f956be7917e476f49f4a5434d3c868bfc0d152bff98e2046ac0d93a64275d4e23a78dedc283e841781512ab5785231236a2dcce763715ad2a98f26c80e0e85064146bc24c068c8f634b667c49e5c76bc7d2580d5ec1a72d2ecf675502f9666cbecbdae4ef9e53a2a290c3bdae2a5d6e4c040709ce83d431b6934d859d71280215e2de130a99ba5bcad7885b41a0daa5dbe7747b5f2bfa7ed6b031a1967f0cc35550945b7e4b22025fb1605155fd674671e845b8ea236b72d26520c4e4bbe90554d52064a36f05f07da8fb12ada41864787272cdce09a3f5cbb550b8f6cab145c17985bf22e2cbeac3c6d80c82022d0f204b1eb146904d24346fb95b462e33444f4bd116c219ef69e9515d5e469497d9283b46c0914ad6ebf99c05bf7f77351623f209560563ed5dd14e8de154ffd4a96d3ed4a67eb9ba897759ded9888b8c8998dff462eae71183b8e3835b36e11e55a3bd692752e005ce82bbc1246298ccf639259d23bb6f3a4de676085260a0c4d714d7002de30f0851754c94d8f1f8dabb0146d45b2f9ee8182f4f7c68d62dd366decb2c0b845c960002a4fd58912ec0ff37a9cca612fe2d86932a8cb5f077940e487a1682d76a7b81f182c5165a3396cb89c1279e204c54de1e827a8aa4bec1ad5ceed297922919befec483084c429d953822b21279334f3906e375dd897c451ec7ac7747d0cf8033f9bb07668eb26b082dc7f9d1da64e55131d0083ade2908a65421177f09ab61f507eb169ccd1305d26a9157"}, {0xb0, 0x115, 0x1, "c0b94c5cfc12354861746452c1ffe601f2872e4f09f694fa2309ebdf84daa6395584dc13d734491b5b198ffe255d7bb8ab356dea0ea5faa69a504ec327ff0f60e923c9044e509cbb9d73a50ec0b16c79beefe87fa1c5c3b1cc51806788f8ec5d150a105edd154a93444c13b021bbfd48bf7d377b4a8d791211ecfa4c6821473d599988d18fb72b67ba2b5c56fa7f8eae56e453da225f06212a0c1e11b5"}, {0x108, 0x101, 0x4, "21f47e0a716b0818fccdc0d78f3b01dd304c84e396861fc5a927e8787dad9d113d73b125e937850c5d95409b6f5b08f692f3d1dfe4590d5d64f5f9ddf17280e4f445d6b8b65195ecf6c72e5c7c7485baef0f9cdf9e03fdc341e5787e44dd5e26c5278208ff5de55d574e067bc5e1bb3517134c372b2ace82e92e02a87a6dba3c2448483d5b98e020d46c9ad427e5eef7620ac502e05b84a40f50845da931cf36457c8549eac8e67e8696ff47bb0da55600a9fb45f39ba1056c4d685c275348447c6b55c8da45618077ea9fa2f052400032a4c804f6347cf2de661520f4e472e05a18e06fb60d8c83df0a4fd2ad6eb3729aa10712d2"}, {0x48, 0x1b, 0x2, "6c1b73a329a4edfb940a0cad59edd4de45cf339fa2bc47863ac74d878893dfb1f3692620224a53b0106bfa444f76ed7584"}, {0x88, 0x116, 0x3, "c361aa6f6891fac1829e1810a0304924f43a31dc3aaab7748b4b4e0c17e308ce9aa4210c4a06de7bb1a1f7efd859156188eb753b6fda9d6dcd283d288c04984745f333915d3554372f70743e94a00a9a790e63d3be4add13eef53e64f8a3c400cceef6f851b81523efef00ec54c382c692775255"}, {0xc8, 0x112, 0x3, "750e4d07f381a2f8f47cb7651de743678657354cb4eb9ad6fbc7b27a259c5b5b4c33c62a54b0359d14d4ff2f99df187aaa66a396b51ced6c03d35321fe0b6f100e4716d284ccc69e1e5cad9bf19e000f67aae3096392eb46772cd1803fef8040e01dbdcf15eb1c9ec207afe92f36599726c299efa9db1c0a8cf1f8afda75bb6a3bc7513fcf049ccb68467eaa758cff0b6d2c8678a11fb02033dd90146a0e3294af5395604349d9076b8e04c74d2b3d6468eb6421c3e6b571"}], 0x15b8}}], 0x1, 0x800) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1491.995650][ T1120] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:41 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000043400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:41 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffff7f, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:41 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x60, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1492.374638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.383125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.391532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1492.495276][ T1155] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1492.506708][ T1162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:42 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000053400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:42 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffff9e, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1492.607611][ T1162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:42 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:42 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x61, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xfe66}}}]}]}, 0x98}}, 0x42) splice(r3, 0x0, r1, 0x0, 0x10005, 0x4) 15:06:43 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100), &(0x7f00000005c0)=0x4) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x10000, 0x4) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10006, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00#&\x00'/20, @ANYRES32=r4, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x77, 0xf6, 0x9, 0x24, @private1, @ipv4={[], [], @multicast1}, 0x7800, 0x80, 0x1ff}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40020}, 0x4) 15:06:43 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfffffff0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:43 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x300, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:43 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000063400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:44 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:44 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x500, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:44 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x80000000, 0x10000, 0x9}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r3, r4}) r5 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r5, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000000002028d9ec91205ae7aa1bd42355c2af2369b847d944bac14e8965a3145d10c5629fc0e54c61d9d8710a5567d81e649a21fbb3c44f8bd43c48354bcbcb49521b"], 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:44 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000083400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:44 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xf, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1495.525831][ T1300] __nla_validate_parse: 9 callbacks suppressed [ 1495.525841][ T1300] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1495.556712][ T1318] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x600, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:45 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x1f, 0x54, 0x7, 0x8, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00', 0x20, 0x80, 0x3, 0x6}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@multicast1, @loopback, r0}, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000004dfd258fdd96e4ee1ae1373d8d8a3fef234dcdae95b10c72e3fc759f0000"], 0x22) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:45 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000093400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:45 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x10, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1496.214612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.222967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.231344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.613125][ T1348] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1496.639596][ T1352] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000a3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:46 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x13, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) [ 1496.999318][ T1348] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x900, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:46 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000c3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1497.152676][ T1404] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:46 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x2, 'wlc\x00', 0x1, 0x8001, 0x79}, {@remote, 0x4e24, 0x10000, 0x200, 0xfffffff7, 0xcb1}}, 0x44) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1497.236051][ T1413] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:47 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xc0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1497.723242][ T1436] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1497.743013][ T1413] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:47 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000e3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1498.243781][ T1459] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/74, 0x4a}, 0x10160) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000009400)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close(r2) r4 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r4, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="7a43dfd6b660007a"], 0x22) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001480)={0x0, 0x1ff, 0x8, 0x9}, &(0x7f0000001500)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000001540)={r6, 0x80}, &(0x7f0000001580)=0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) clock_gettime(0x0, &(0x7f0000009280)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000009000)=[{{&(0x7f0000001640)=@xdp, 0x80, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/171, 0xab}], 0x1}, 0x7}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001840)=""/211, 0xd3}, {&(0x7f0000001940)=""/81, 0x51}, {&(0x7f00000019c0)=""/239, 0xef}, {&(0x7f0000001ac0)=""/16, 0x10}, {&(0x7f0000001b00)=""/47, 0x2f}, {&(0x7f0000001b40)=""/203, 0xcb}, {&(0x7f0000001c40)=""/231, 0xe7}, {&(0x7f0000001d40)=""/238, 0xee}], 0x8, &(0x7f0000001ec0)=""/84, 0x54}, 0x80000001}, {{&(0x7f0000001f40)=@sco={0x1f, @none}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001fc0)=""/92, 0x5c}, {&(0x7f0000002040)=""/104, 0x68}, {&(0x7f00000020c0)=""/203, 0xcb}, {&(0x7f00000021c0)=""/34, 0x22}, {&(0x7f0000002200)=""/136, 0x88}, {&(0x7f00000022c0)=""/99, 0x63}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x7, &(0x7f00000033c0)=""/129, 0x81}, 0xffffffe2}, {{&(0x7f0000003480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003500)=""/1, 0x1}, {&(0x7f0000003540)=""/68, 0x44}, {&(0x7f00000035c0)=""/14, 0xe}, {&(0x7f0000003600)=""/226, 0xe2}, {&(0x7f0000003700)=""/121, 0x79}, {&(0x7f0000003780)=""/117, 0x75}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7, &(0x7f0000004880)=""/138, 0x8a}, 0x2}, {{&(0x7f0000004940)=@xdp, 0x80, &(0x7f0000004ac0)=[{&(0x7f00000049c0)=""/217, 0xd9}], 0x1, &(0x7f0000004b00)=""/3, 0x3}}, {{&(0x7f0000004b40)=@nl=@unspec, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004bc0)=""/80, 0x50}, {&(0x7f0000004c40)}], 0x2, &(0x7f0000004cc0)=""/217, 0xd9}, 0x14c}, {{&(0x7f0000004dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e40)=""/254, 0xfe}, {&(0x7f0000004f40)=""/190, 0xbe}], 0x2, &(0x7f0000005040)=""/187, 0xbb}, 0xa92}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000005100)=""/172, 0xac}, {&(0x7f00000051c0)=""/19, 0x13}, {&(0x7f0000005200)=""/190, 0xbe}, {&(0x7f00000052c0)=""/248, 0xf8}, {&(0x7f00000053c0)=""/180, 0xb4}, {&(0x7f0000005480)=""/108, 0x6c}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/207, 0xcf}], 0x8, &(0x7f0000006680)=""/202, 0xca}, 0x5}, {{0x0, 0x0, &(0x7f0000008b00)=[{&(0x7f0000006780)}, {&(0x7f00000067c0)=""/124, 0x7c}, {&(0x7f0000006840)=""/1, 0x1}, {&(0x7f0000006880)=""/109, 0x6d}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000007900)=""/39, 0x27}, {&(0x7f0000007940)=""/226, 0xe2}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/158, 0x9e}], 0x9, &(0x7f0000008bc0)=""/67, 0x43}, 0xff}, {{&(0x7f0000008c40)=@nfc_llcp, 0x80, &(0x7f0000008f00)=[{&(0x7f0000008cc0)=""/36, 0x24}, {&(0x7f0000008d00)=""/82, 0x52}, {&(0x7f0000008d80)=""/159, 0x9f}, {&(0x7f0000008e40)=""/187, 0xbb}], 0x4, &(0x7f0000008f40)=""/148, 0x94}, 0x200}], 0xa, 0x40000103, &(0x7f00000092c0)={r7, r8+60000000}) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f00000093c0)={&(0x7f0000009300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000009380)={&(0x7f0000009340)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20044004) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000012c0), &(0x7f0000001340)=0x68) 15:06:48 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xec0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1499.334648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.343053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x2, @any, 0x9, 0x2}, 0xe) 15:06:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a00000f3400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:49 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x33fe0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:49 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x20000898, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:49 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000103400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000340)=@deltaction={0xc4, 0x31, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ff}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x2b, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1500.676263][ T1577] __nla_validate_parse: 6 callbacks suppressed [ 1500.676275][ T1577] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1500.706722][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:50 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000603400", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) getsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x170, 0x3, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc}}]}, @CTA_TUPLE_MASTER={0x7c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010101}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x400c001) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:06:51 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x7ffff000, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1501.589869][ T1585] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1502.174571][ T1653] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:51 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000003402", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:51 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xfffffdef, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3ff, 0xfffffffffffffffd}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000000c0)={'veth0_to_batadv\x00', {0x2, 0x4e24, @empty}}) setsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000100)="47708a78addf70bfc62f63af1baa5542ab749bdf0d01687021b6be12cc8ad9de818d87f5c2c8851f2cabc396a59c065ceb84f87578f222f05582397ccc41b2e4", 0x40) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r2, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000040)={0x3, 0x400}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x0, [], [{0x8, 0x763, 0x9, 0x6, 0x1, 0x10001}, {0xa09, 0x8000, 0xffff, 0x4, 0x100, 0x3f}], [[], [], [], [], [], []]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 1502.356576][ T1661] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1502.398273][ T1666] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1503.254754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.263222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.271667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 15:06:53 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}}, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1503.346515][ T1661] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x3, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000003403", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1100, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 1503.571127][ T1742] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000003404", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1503.648420][ T1757] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 15:06:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0xf, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 1504.105778][ T1780] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 15:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1421, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000040)=0x81, 0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', {0x7, 0x0, @multicast1}}) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x2c}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x30, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "5c911c", 0x0, 0x0, 0x0, @mcast1, @private2}}}}}}, 0x62) 15:06:53 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000003405", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) 15:06:53 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x98, 0x31, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15:06:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32], 0x22) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000001280)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000012c0)=0x2c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x43f, 0x5, 0x7fff, 0x400, 0x3ff, 0x758}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1505.524867][ T1817] ================================================================== [ 1505.533391][ T1817] BUG: KASAN: use-after-free in tcf_action_destroy+0x188/0x1b0 [ 1505.540973][ T1817] Read of size 8 at addr ffff8880948b1400 by task syz-executor.2/1817 [ 1505.549123][ T1817] [ 1505.551470][ T1817] CPU: 0 PID: 1817 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 1505.560057][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.570118][ T1817] Call Trace: [ 1505.573448][ T1817] dump_stack+0x198/0x1fd [ 1505.577784][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.583004][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.588214][ T1817] print_address_description.constprop.0.cold+0xae/0x497 [ 1505.595266][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.600498][ T1817] ? lockdep_hardirqs_off+0x96/0xd0 [ 1505.605703][ T1817] ? vprintk_func+0x97/0x1a6 [ 1505.610324][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.615527][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.620746][ T1817] kasan_report.cold+0x1f/0x37 [ 1505.625535][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1505.630764][ T1817] tcf_action_destroy+0x188/0x1b0 [ 1505.635799][ T1817] tcf_action_init+0x285/0x380 [ 1505.640575][ T1817] ? tcf_action_init_1+0xac0/0xac0 [ 1505.645738][ T1817] tcf_action_add+0xd9/0x360 [ 1505.650337][ T1817] ? tca_action_gd+0xda0/0xda0 [ 1505.656119][ T1817] ? bpf_lsm_capable+0x5/0x10 [ 1505.660806][ T1817] ? __nla_parse+0x3d/0x4a [ 1505.665233][ T1817] tc_ctl_action+0x33a/0x439 [ 1505.669834][ T1817] ? tcf_action_add+0x360/0x360 [ 1505.674698][ T1817] ? lock_is_held_type+0xbb/0xf0 [ 1505.679645][ T1817] ? tcf_action_add+0x360/0x360 [ 1505.684503][ T1817] rtnetlink_rcv_msg+0x44e/0xad0 [ 1505.689444][ T1817] ? rtnetlink_put_metrics+0x510/0x510 [ 1505.694912][ T1817] ? lock_acquire+0x1f3/0xae0 [ 1505.699620][ T1817] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1505.704915][ T1817] netlink_rcv_skb+0x15a/0x430 [ 1505.709685][ T1817] ? rtnetlink_put_metrics+0x510/0x510 [ 1505.715164][ T1817] ? netlink_ack+0xa10/0xa10 [ 1505.719784][ T1817] netlink_unicast+0x533/0x7d0 [ 1505.724555][ T1817] ? netlink_attachskb+0x810/0x810 [ 1505.729672][ T1817] ? __phys_addr_symbol+0x2c/0x70 [ 1505.734707][ T1817] ? __check_object_size+0x171/0x3e4 [ 1505.740024][ T1817] netlink_sendmsg+0x856/0xd90 [ 1505.744797][ T1817] ? netlink_unicast+0x7d0/0x7d0 [ 1505.749761][ T1817] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1505.755080][ T1817] ? netlink_unicast+0x7d0/0x7d0 [ 1505.760040][ T1817] sock_sendmsg+0xcf/0x120 [ 1505.764462][ T1817] ____sys_sendmsg+0x6e8/0x810 [ 1505.769235][ T1817] ? kernel_sendmsg+0x50/0x50 [ 1505.773915][ T1817] ? do_recvmmsg+0x6d0/0x6d0 [ 1505.778535][ T1817] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1505.784535][ T1817] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1505.790518][ T1817] ? __lock_acquire+0xb5e/0x5570 [ 1505.795464][ T1817] ___sys_sendmsg+0xf3/0x170 [ 1505.800056][ T1817] ? sendmsg_copy_msghdr+0x160/0x160 [ 1505.805343][ T1817] ? __fget_files+0x272/0x400 [ 1505.810025][ T1817] ? lock_downgrade+0x830/0x830 [ 1505.814874][ T1817] ? find_held_lock+0x2d/0x110 [ 1505.819681][ T1817] ? __fget_files+0x294/0x400 [ 1505.824364][ T1817] ? __fget_light+0xea/0x280 [ 1505.828961][ T1817] __sys_sendmsg+0xe5/0x1b0 [ 1505.833469][ T1817] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1505.838512][ T1817] ? syscall_enter_from_user_mode+0x20/0x290 [ 1505.844513][ T1817] ? lockdep_hardirqs_on+0x53/0x100 [ 1505.850766][ T1817] do_syscall_64+0x2d/0x70 [ 1505.855198][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1505.861088][ T1817] RIP: 0033:0x45d5f9 [ 1505.864984][ T1817] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1505.884589][ T1817] RSP: 002b:00007f11eadccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.893054][ T1817] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1505.901042][ T1817] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 1505.909028][ T1817] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1505.917034][ T1817] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1505.925011][ T1817] R13: 00007ffdcfbfcbdf R14: 00007f11eadcd9c0 R15: 000000000118cf4c [ 1505.933034][ T1817] [ 1505.935357][ T1817] Allocated by task 1817: [ 1505.939689][ T1817] kasan_save_stack+0x1b/0x40 [ 1505.944381][ T1817] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1505.950019][ T1817] __kmalloc+0x1b0/0x310 [ 1505.954285][ T1817] tcf_idr_create+0x5b/0x7b0 [ 1505.958883][ T1817] tcf_connmark_init+0x535/0x960 [ 1505.963829][ T1817] tcf_action_init_1+0x6a5/0xac0 [ 1505.968773][ T1817] tcf_action_init+0x249/0x380 [ 1505.973539][ T1817] tcf_action_add+0xd9/0x360 [ 1505.978125][ T1817] tc_ctl_action+0x33a/0x439 [ 1505.982712][ T1817] rtnetlink_rcv_msg+0x44e/0xad0 [ 1505.987643][ T1817] netlink_rcv_skb+0x15a/0x430 [ 1505.992399][ T1817] netlink_unicast+0x533/0x7d0 [ 1505.997172][ T1817] netlink_sendmsg+0x856/0xd90 [ 1506.001930][ T1817] sock_sendmsg+0xcf/0x120 [ 1506.006339][ T1817] ____sys_sendmsg+0x6e8/0x810 [ 1506.011096][ T1817] ___sys_sendmsg+0xf3/0x170 [ 1506.015693][ T1817] __sys_sendmsg+0xe5/0x1b0 [ 1506.020188][ T1817] do_syscall_64+0x2d/0x70 [ 1506.024600][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1506.030476][ T1817] [ 1506.032821][ T1817] Freed by task 1823: [ 1506.036803][ T1817] kasan_save_stack+0x1b/0x40 [ 1506.041495][ T1817] kasan_set_track+0x1c/0x30 [ 1506.046083][ T1817] kasan_set_free_info+0x1b/0x30 [ 1506.051021][ T1817] __kasan_slab_free+0xd8/0x120 [ 1506.055977][ T1817] kfree+0x10e/0x2b0 [ 1506.059872][ T1817] tcf_generic_walker+0x959/0xb60 [ 1506.064905][ T1817] tca_action_flush+0x42b/0x920 [ 1506.069749][ T1817] tca_action_gd+0x8ac/0xda0 [ 1506.074336][ T1817] tc_ctl_action+0x280/0x439 [ 1506.078924][ T1817] rtnetlink_rcv_msg+0x44e/0xad0 [ 1506.083859][ T1817] netlink_rcv_skb+0x15a/0x430 [ 1506.088630][ T1817] netlink_unicast+0x533/0x7d0 [ 1506.093396][ T1817] netlink_sendmsg+0x856/0xd90 [ 1506.098163][ T1817] sock_sendmsg+0xcf/0x120 [ 1506.102574][ T1817] ____sys_sendmsg+0x6e8/0x810 [ 1506.107334][ T1817] ___sys_sendmsg+0xf3/0x170 [ 1506.111920][ T1817] __sys_sendmsg+0xe5/0x1b0 [ 1506.116423][ T1817] do_syscall_64+0x2d/0x70 [ 1506.120838][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1506.126720][ T1817] [ 1506.129042][ T1817] Last call_rcu(): [ 1506.132774][ T1817] kasan_save_stack+0x1b/0x40 [ 1506.137454][ T1817] kasan_record_aux_stack+0x82/0xb0 [ 1506.142644][ T1817] call_rcu+0x15e/0x7b0 [ 1506.146863][ T1817] inetdev_event+0xcc5/0x14fd [ 1506.151545][ T1817] notifier_call_chain+0xb5/0x200 [ 1506.156596][ T1817] call_netdevice_notifiers_info+0xb5/0x130 [ 1506.162504][ T1817] rollback_registered_many+0x963/0x14f0 [ 1506.168154][ T1817] unregister_netdevice_many.part.0+0x1a/0x2f0 [ 1506.174306][ T1817] unregister_netdevice_many+0x36/0x50 [ 1506.179841][ T1817] ip_tunnel_delete_nets+0x3da/0x580 [ 1506.185131][ T1817] ops_exit_list+0x10d/0x160 [ 1506.189721][ T1817] setup_net+0x502/0x850 [ 1506.193966][ T1817] copy_net_ns+0x2cf/0x5e0 [ 1506.198385][ T1817] create_new_namespaces+0x3f6/0xb10 [ 1506.203697][ T1817] unshare_nsproxy_namespaces+0xbd/0x1f0 [ 1506.209331][ T1817] ksys_unshare+0x445/0x8e0 [ 1506.213832][ T1817] __x64_sys_unshare+0x2d/0x40 [ 1506.218592][ T1817] do_syscall_64+0x2d/0x70 [ 1506.223029][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1506.228909][ T1817] [ 1506.231236][ T1817] The buggy address belongs to the object at ffff8880948b1400 [ 1506.231236][ T1817] which belongs to the cache kmalloc-512 of size 512 [ 1506.245307][ T1817] The buggy address is located 0 bytes inside of [ 1506.245307][ T1817] 512-byte region [ffff8880948b1400, ffff8880948b1600) [ 1506.258421][ T1817] The buggy address belongs to the page: [ 1506.264064][ T1817] page:00000000a366bb36 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x948b1 [ 1506.274235][ T1817] flags: 0xfffe0000000200(slab) [ 1506.279093][ T1817] raw: 00fffe0000000200 ffffea0002722048 ffffea0002a10a08 ffff8880aa040600 [ 1506.287701][ T1817] raw: 0000000000000000 ffff8880948b1000 0000000100000004 0000000000000000 [ 1506.296274][ T1817] page dumped because: kasan: bad access detected [ 1506.302676][ T1817] [ 1506.304993][ T1817] Memory state around the buggy address: [ 1506.310620][ T1817] ffff8880948b1300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.318684][ T1817] ffff8880948b1380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 15:06:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x94}, 0x8000) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07030000"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1506.326750][ T1817] >ffff8880948b1400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1506.334819][ T1817] ^ [ 1506.338887][ T1817] ffff8880948b1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1506.346947][ T1817] ffff8880948b1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1506.355008][ T1817] ================================================================== [ 1506.363071][ T1817] Disabling lock debugging due to kernel taint 15:06:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b0500000000000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000000000000000000000040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2114, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 15:06:56 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000080), 0x1625, 0xfffffffffffffff7) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000011000002e1100c08000a0000003406", 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000025c0)={0x30000011}) [ 1506.489169][ T1817] Kernel panic - not syncing: panic_on_warn set ... [ 1506.495804][ T1817] CPU: 1 PID: 1817 Comm: syz-executor.2 Tainted: G B 5.9.0-rc3-syzkaller #0 [ 1506.505772][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1506.515830][ T1817] Call Trace: [ 1506.519127][ T1817] dump_stack+0x198/0x1fd [ 1506.523462][ T1817] ? tcf_action_destroy+0x120/0x1b0 [ 1506.528660][ T1817] panic+0x347/0x7c0 [ 1506.532560][ T1817] ? __warn_printk+0xf3/0xf3 [ 1506.537153][ T1817] ? preempt_schedule_common+0x59/0xc0 [ 1506.542614][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1506.547849][ T1817] ? preempt_schedule_thunk+0x16/0x18 [ 1506.553229][ T1817] ? trace_hardirqs_on+0x55/0x220 [ 1506.558285][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1506.563500][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1506.568697][ T1817] end_report+0x4d/0x53 [ 1506.572858][ T1817] kasan_report.cold+0xd/0x37 [ 1506.577540][ T1817] ? tcf_action_destroy+0x188/0x1b0 [ 1506.582857][ T1817] tcf_action_destroy+0x188/0x1b0 [ 1506.587890][ T1817] tcf_action_init+0x285/0x380 [ 1506.592669][ T1817] ? tcf_action_init_1+0xac0/0xac0 [ 1506.597828][ T1817] tcf_action_add+0xd9/0x360 [ 1506.602442][ T1817] ? tca_action_gd+0xda0/0xda0 [ 1506.607315][ T1817] ? bpf_lsm_capable+0x5/0x10 [ 1506.612001][ T1817] ? __nla_parse+0x3d/0x4a [ 1506.616598][ T1817] tc_ctl_action+0x33a/0x439 [ 1506.621195][ T1817] ? tcf_action_add+0x360/0x360 [ 1506.626055][ T1817] ? lock_is_held_type+0xbb/0xf0 [ 1506.631000][ T1817] ? tcf_action_add+0x360/0x360 [ 1506.635862][ T1817] rtnetlink_rcv_msg+0x44e/0xad0 [ 1506.640813][ T1817] ? rtnetlink_put_metrics+0x510/0x510 [ 1506.646280][ T1817] ? lock_acquire+0x1f3/0xae0 [ 1506.650970][ T1817] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1506.659135][ T1817] netlink_rcv_skb+0x15a/0x430 [ 1506.663938][ T1817] ? rtnetlink_put_metrics+0x510/0x510 [ 1506.669402][ T1817] ? netlink_ack+0xa10/0xa10 [ 1506.674008][ T1817] netlink_unicast+0x533/0x7d0 [ 1506.678780][ T1817] ? netlink_attachskb+0x810/0x810 [ 1506.683937][ T1817] ? __phys_addr_symbol+0x2c/0x70 [ 1506.688998][ T1817] ? __check_object_size+0x171/0x3e4 [ 1506.694285][ T1817] netlink_sendmsg+0x856/0xd90 [ 1506.699055][ T1817] ? netlink_unicast+0x7d0/0x7d0 [ 1506.704038][ T1817] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1506.709345][ T1817] ? netlink_unicast+0x7d0/0x7d0 [ 1506.714452][ T1817] sock_sendmsg+0xcf/0x120 [ 1506.718852][ T1817] ____sys_sendmsg+0x6e8/0x810 [ 1506.723626][ T1817] ? kernel_sendmsg+0x50/0x50 [ 1506.728282][ T1817] ? do_recvmmsg+0x6d0/0x6d0 [ 1506.732878][ T1817] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1506.738863][ T1817] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 1506.744843][ T1817] ? __lock_acquire+0xb5e/0x5570 [ 1506.749801][ T1817] ___sys_sendmsg+0xf3/0x170 [ 1506.754410][ T1817] ? sendmsg_copy_msghdr+0x160/0x160 [ 1506.759821][ T1817] ? __fget_files+0x272/0x400 [ 1506.764485][ T1817] ? lock_downgrade+0x830/0x830 [ 1506.769331][ T1817] ? find_held_lock+0x2d/0x110 [ 1506.774094][ T1817] ? __fget_files+0x294/0x400 [ 1506.778767][ T1817] ? __fget_light+0xea/0x280 [ 1506.783362][ T1817] __sys_sendmsg+0xe5/0x1b0 [ 1506.787870][ T1817] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1506.792908][ T1817] ? syscall_enter_from_user_mode+0x20/0x290 [ 1506.798915][ T1817] ? lockdep_hardirqs_on+0x53/0x100 [ 1506.804146][ T1817] do_syscall_64+0x2d/0x70 [ 1506.808586][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1506.814489][ T1817] RIP: 0033:0x45d5f9 [ 1506.818396][ T1817] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1506.838002][ T1817] RSP: 002b:00007f11eadccc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1506.846445][ T1817] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 1506.854430][ T1817] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 1506.862551][ T1817] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1506.870546][ T1817] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1506.878509][ T1817] R13: 00007ffdcfbfcbdf R14: 00007f11eadcd9c0 R15: 000000000118cf4c [ 1506.887740][ T1817] Kernel Offset: disabled [ 1506.892082][ T1817] Rebooting in 86400 seconds..