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"], 0x48}}, 0x0) r12 = epoll_create1(0x0) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd0}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x4ffe0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r6, @ANYBLOB="100025bd7000fedbdf250100000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB], 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="c643e3d5bac9231abf31c3ae100000000000000000", @ANYRES16=r6, @ANYBLOB="000328bd7000fcdbdf2510000000040016010500a20007000000"], 0x20}, 0x1, 0x0, 0x0, 0x400a1}, 0x8000) close(r0) 17:50:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200007001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@multicast2, @dev={0xac, 0x14, 0x14, 0x42}, r4}, 0xc) [ 2938.276468][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2938.463725][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2938.474970][ T3736] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = socket(0x4, 0x4, 0xc0) sendto$rxrpc(r1, &(0x7f0000000d80)="24ec40e33a276c0edc0ee0f2c8299686c64f3bca9acf1b07fd43bed5caa65953aeb289a2f5af9428f2fc50d1d789f0b9f7e4643739aefc41289f23fafaf50dadbee1b87277d0a73e785e2b620e561d50be22500e98507c9c3fa1acea4c7143bc62b19794c3ad73130851e8491b631fd971173a6e8d28e5581b0e655514874d7f600f0e24b93a25fb99c36003a84d9e281cafdf5deff05dc80b39a9feac49f80b4843265bac", 0xa5, 0xc004, &(0x7f0000000e40)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) close(r0) 17:50:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x29, @rand_addr=0x1, 0x4e20, 0x1, 'rr\x00', 0x20, 0x9, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 0xa12, 0x200, 0x3}}, 0x44) 17:50:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000a001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800005000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/75, 0x4b}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000001180)=""/118, 0x76}, {&(0x7f0000001200)=""/238, 0xee}, {&(0x7f0000001300)=""/144, 0x90}, {&(0x7f00000013c0)=""/53, 0x35}], 0x7}, 0x40018160) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) sendto$inet6(r3, &(0x7f0000001600)="99646b16382181394938ca2fc15ebbf4fd8c68e927c67711820d24fca7476c5e96216d8bfed95cfa679a64e86c9d1e9194efba5c19450804374e6ec48f7054e3669ffe7eb1576f0757a2397ebec732328a3c591425f909ec888c", 0x5a, 0x0, 0x0, 0x0) r5 = accept(r2, &(0x7f00000014c0)=@hci, &(0x7f0000001540)=0x80) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000001580), &(0x7f00000015c0)=0x4) 17:50:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:43 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000000306050000000000a0f68e480000000007009804050001000700000009000273797a310000000005000100070000000900020073797a3200"], 0x3c}, 0x1, 0x0, 0x0, 0xb9fa7bc1de0c5104}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40, 0x0) close(r0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'netpci0\x00', {}, 0x5}) 17:50:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f00000014c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001500)=0x1c) socketpair(0x2b, 0x800, 0xcd, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000200)=0x7, 0x4) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@mcast2, r6}, 0x14) 17:50:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000e001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket(0x11, 0x800000003, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r5, 0x1, 0x10, 0xb6ca, 0x6}, &(0x7f0000000100)=0x18) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) close(r0) 17:50:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800007000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x80fd, 0x2}) r2 = socket(0x18, 0x2, 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40)='nl80211\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) r11 = getpid() sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f802008fcacff8256cf000dbdf250702000000000000000000000012a7bb5e62ed0c1947841239f7b3381835596e734b3f171eb0cee3127e0306ae7fc2c25e430bf736b654524a45360c701810ee2dade33ebccee2b09c1e5f68ff5b991d732716039dc2f02ed3a441516be9de9ae100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="05002700400000000a000200aaaaaaaaaa2700000500210007000000"], 0x2f8}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r12 = socket(0x2, 0x6, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet6_mreq(r12, 0x29, 0x14, &(0x7f0000000300)={@initdev, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={0x0, @generic={0x29, "41e1f93f3d1a4fe10e56e73834b6"}, @xdp={0x2c, 0x5bc1d83d58008a92, 0x0, 0x8}, @isdn={0x22, 0x34, 0x5, 0x80, 0x80}, 0xad, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000380)='geneve1\x00', 0x7fff, 0xdd, 0x4}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c805) r15 = socket(0x2, 0x6, 0x0) ioctl(r15, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") accept(r15, &(0x7f0000001f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002000)=0x80) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000002800)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000027c0)={&(0x7f0000002040)={0x6a4, r3, 0x200, 0x70bd26, 0x25dfdbf8, {}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PROBE_RESP={0x629, 0x91, "5f1387eacc9b08bc60327594c7447365bead8212a759a893000ab387826efa9f17daf101eb30d16c13026763eec95bb687954db31c344f55673971393d3337fdf5d2d545817dc3fa7807f7525db6b86b2ae3c9ab0f017e2de757d95ab69646026cc07a7f7b5718b30e280fa20d2534312a0adaba73ab8598046ea4c3f7aaf8825d8ae1afc389905bf08b11de2bad7484ee663faee1c84e372af128c0701bf4aa63f4ab6c22e23549dbdedebd6ebf1b05ed011ccc7a2d635ecfcaf3872cff97ed059382822597838f0036666ea43f9ee33419e72ac58cccb6cd76bc87334e890a82a6c0930587da58aaecb03e28cd9b98a57cfe1f74f08799dab08c11e4b9c0c1ba15ecf59a7e518c6abe8a6f33a1696ad71e22d36b80eae74a7d7d780ec8c44fd49317c69dcc3136b1cc4f47bd867384f6920e448bd14621cbf42bca8745ee527c448190964defb658e69d5d836c8c29a4deafab56b4577468c13bc39642526e93bb491654af0c388fa2bccffc485cbf7404c29255b0f5dee79396cf8644b344c9563e4fc715392077c83c7e3ef38ebad4a39502a4f12f0c2ebbc598d85d0ba8424d9e7f997a24479ced3112ff96c5a07c270bb52b96ecea123d0087e8bbac198536bbec11252ab660643d8a87006d406e979b5a6638ab0a4fd53d21ba6a89355ed02e653046d92c28779832641f2c3249078e27f8e64073b2430064a7a3e6b36914f7c755f0f37c67d48f9bd40f665b7fd0ae9adae0d8843a907e6fe63fbfcaf9dc433f3ba2bf991bdaf0c31350a85e18fa4dd3a012896990d999696606a8e17a5b3f0f4fb1f2380a321d26b4f70ea63acaa93a7a913c4775eddf9c9028d3eb3c2bc87c465e70b7a6dd5602070aa8101c15cef06ffc430c4242293e3ef7e8739a6505aec2271d09e14ff68499e2fb3ad916095a83176aa159e80279b175f1848daae8168068eca714260e234e91c8368b0bf8ad8118a80b9f7648e8a845993261f7a7860c444afa1322df0dac1cecd62360f12e9796bd2f25052835357f82cbcb50475ee3f6949b9661b368ce2fee789c9e7e0f2d7f7d041d5137094e59ca9027f473b00a2e2f1b5290006e23c3a9d4b486e172f4b94fc3475b5bbc9a6bfc6cee0253d4315e70d9baa1ff23af8522f4e3e00608cb08588c10d76223129d5a2b05d88e535a7b6b33564118c137029f4d5e797bb4ffd64bcde8974302e075b8c8bc27bf44b9cb1da605ff5c123df993ab0a5efe33fc3146ba34235665cacc5a7da433dc6bbda032f5d8918ae6c4b27bdf06a9aa917f0948e9fd0c197eca8834777e5ba79fa873cdc388f74685e63e9f95623d553ecbd7dc54694feaa466a1ff5cf1d4214d5d8d5037ae5b45453004050d372389fc370222318da9f165516061b62c61afb843d1b634f761846629c33a576e6152eb501303c3565cf98cc5d9d731c53a1d188a52c71af24f6336a013fa47b732aa9f47f61842585218e929d0dc2f0a7072f2981e6fb02885e6e3bc08ac6a03895cb90ddc69bfaef8c2b98d39ba81c41146374fa5348103a909c6433fd0a4339400873a9aef1d7756a5c0641eb608625540d0a5f353b2a17833171146d038996bc29a2491505836836f4351fcc48c874d9e3ad5bccb619525e76ab5732b7278f2067c7e470ac3ce72fbf1ed6d93f63a46b9f9437241531b1b33ce75d82e6f4128962231e4ba43b06793d6aeba29dbc12ab99c9d3c8e8232c052f2ae0eb21b72c0c59149a0999279d899843c1978a0733dd24b23550b0480842e8b484c9a3bcd36bb33cfae73101dfadb36dc1a48c8015778d3533cba17e9647f481d8e10623cbee89e30325d66903a370c7c39465b3e5eb9b6e391f12b643860c50516a6ff8ffb9e0a89554d94b550bb1b633fd378ba4ae740b0a1770020626090e87cb15720432174b6ccaa51d23bb357200ecff799a7440ab569b642ae77c4c9830df26a8e43c83489f4b69a0dfd34ce830db3be3aed3ff3f9946a0afa35a61fc874f1a86d8e566a422e48db38f748f908109f314b074560f8ea7a6004e73332f38dbbf16fb6fbb8d08e3f29eb5e1e13432ea1ea97016c4fee4f8abf430d79d0d04265333abf5eb6cde3f7c3a588251cbe088c564f4e2b83327c95722404bf5e36b8f87f491ece51556c3e09109a03f8137cc4199675d563a69d71fb076380c1747bb0ab05579543ab2f912466d409e5e91deb02375d0b462c"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_BEACON_TAIL={0x55, 0xf, "7a42518f8e6b14082dc2109c502bc0a2fdfde3c14637d39f914e57a3980dd1ecf6f3d955e0bb20b46e43896266f1f4278055f7c3a9b4ee700a8097aef276b539bf6931b3ab4794ff92ed1f438b75c983ac"}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r19, 0x8983, &(0x7f0000000140)) close(r19) splice(r17, 0x0, r19, 0x0, 0x4ffe0, 0x0) setsockopt$TIPC_GROUP_JOIN(r17, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x3, 0x3}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r18, 0x89ec, &(0x7f0000000100)={0xa6, 0x3}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r20, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2940.581001][ T3848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="201d11001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2940.633441][ T3852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:50:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000140)) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x20}) close(r0) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000100)=0x3, 0x4) 17:50:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20111d001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000240)=0x1000, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x850) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000070200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff170000000000000000000000400050f21ed60000000000"], 0x80}}, 0x4000000) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) close(r0) 17:50:46 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800008000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2300}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x4c4, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4830f2be}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x660f5b5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16068375}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b1c8a20}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ec58d53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6224c9e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ced0635}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134829ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368af99f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71ced5e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dd1be65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f9c37f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x527493f1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x751c9d43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2756a406}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3054a576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c41665e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5a60a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e01bed4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eaa6e81}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3708}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c916cd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x256dcd13}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a4c147d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33af}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f382a20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48ca67e7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39c5f542}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x641de899}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4afab923}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17c8df37}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e4a7ab1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e92610}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d672574}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7624a249}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52622063}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ce48e25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5719d742}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e6412af}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78a32b92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7441323a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f7d2cbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8f8968e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x302c30bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b49eeff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x500832cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bda562}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf0c3b73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d650319}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91c8fa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ff7e0f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26fa81f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58345545}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39b6fdd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da5dfd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10bd5b95}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53795c5a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66bb8484}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7188aebd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d34152e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60e1ef22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x650fda3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d0c715d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c9d8a4a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70c9bd83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f51b2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5eecb964}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c75c63c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7838679c}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19e717f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21392f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a270e73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d01e3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe81}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x20002001}, 0x8080) 17:50:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20001f001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={[], 0x11}, 0x3}, 0xe) close(r0) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x3f) 17:50:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) r1 = socket(0x4, 0x3, 0x1) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000006b00)={'gre0\x00', 0x7, 0x3}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x1, 'ip6tnl0\x00', {}, 0xff}) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, &(0x7f0000000580)=""/166, 0xa6}, 0x7fffffff}], 0x1, 0x40000142, &(0x7f0000000680)={0x0, 0x1c9c380}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 17:50:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200020001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4, 0xc0) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x80, 0x8000, 0x0, 0x9, 0x5, 0x0, 0x7ff, 0xffffffff, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r3, 0x86, "8eb1de416645c4f43e967061c406f2fc2949e51e5bcefaabf6c40066c9a8193f506ada371170d1ab13011cbab7871b129f39b8601649bef24deb00000000edcef869af17823099bdd75f4af49aded825e05c0eede8e2b7f1cc75f73eb6463e51c2590c7d10cddb2d6fb3ba83da14e5e17f4ef4a04455753899ae12df4617e669080050039ba2"}, &(0x7f0000000140)=0x8e) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) 17:50:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20782e001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuacct.usage_all\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700)='ethtool\x00') getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRESHEX, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4014}, 0x24040085) 17:50:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x21a583, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$isdn(0x22, 0x3, 0x23) r2 = accept(r1, &(0x7f0000000180)=@ipx, &(0x7f0000000080)=0x9d) r3 = socket(0x11, 0x800000003, 0x0) close(r3) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000000c0)=""/33, &(0x7f0000000200)=0x21) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000007c0)={r4, 0xeaa3}, &(0x7f0000000800)=0x8) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e21, @broadcast}}) close(r0) 17:50:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80000c000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1, r4, 0x1c, r5}, 0x10) close(r0) 17:50:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x370, 0x1d0, 0x1d0, 0x100, 0x1d0, 0x1d0, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x4, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [0xff000000, 0xffffffff, 0xff000000], [0x7fc5762cef7ccddb, 0x0, 0x0, 0xffffffff], 'vxcan1\x00', 'bond_slave_0\x00', {}, {}, 0x84, 0x1, 0x0, 0x40}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x62, 0x40, 0x3, 0x40, 0x8, 0x10, 0x108}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@local, @ipv4={[], [], @multicast2}, [0x0, 0xffffff00, 0xff, 0xff], [0xff, 0xffffff00, 0xff000000, 0xff000000], 'macvlan1\x00', 'ip6erspan0\x00', {}, {0xff}, 0x2c, 0xfc, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x1, 0x1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0xff, 0xff000000], [0x0, 0xff000000, 0xffffff00, 0xffffff00], 'bond_slave_1\x00', 'wg1\x00', {0xff}, {0xff}, 0x2b, 0x1, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x1, 0x5}, {0xffffffffffffffff, 0x0, 0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x1b) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x30}, r5}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x6, 0x8, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, [], r5, 0x15, r9, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x3}, 0x10}, 0x78) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f0000000780)={0x0, 0x8f, 0x800, 0x10000, 0xaefc}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x4) connect$l2tp(r8, &(0x7f0000000880)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f00000007c0)={0x0, 0x6, 0x10}, &(0x7f0000000800)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000840)={r13, 0xff}, 0xfffffffffffffffe) 17:50:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20003f001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200040001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800011000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:50 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0x401, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200048001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r3, 0xb631c6b8429a7eb, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) bind$netlink(r6, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r8}, 0x14) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:51 executing program 0: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x7, &(0x7f0000000080)=0x2) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, r2, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d0, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5aa0c68e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1038444b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68bc1244}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63598c3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6503002a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fb0902f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a665d2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266260ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3312035}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6621c4c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fda8ad9}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76201088}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x610a2a5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x171feda4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9466b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7ee1aa923353505d}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r3) 17:50:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind(r1, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80) close(r0) 17:50:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20004c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800082000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xffffff3f, 0x30}, &(0x7f0000000100)=0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x19b9, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000140)) 17:50:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x43e480, 0x0) close(r0) 17:50:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000180)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf250b00000008000500060000000800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x888}, 0x20008844) 17:50:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="206558001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:50:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000700)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) close(r0) 17:50:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket(0x10, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000500)={r4, @in={{0x2, 0x0, @empty}}}, 0x9c) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000004580)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x801008c}, 0xc, &(0x7f0000004540)={&(0x7f0000004480)={0xb4, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:getty_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x7}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c040}, 0x4048010) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x2, 0xb0, 0x80, r4}, &(0x7f0000000300)=0x10) 17:50:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200060001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500637dff5d5d79f212d882000000", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250100000008000600000000000c00018008000b007369700054000380060007004e2400000600040004000000080005000000000008000500ac14144214000200697036746e6c300000000000000000001400060000000000000000000000ffffac1414bb06000400090000003000018008000b00736970000800080000000000070006006c6300000c000700080000000100000008000800346df02d08000600080000000800040048d2000008000500ae0700000800060008000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000011) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'geneve0\x00'}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x2c, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44010) 17:50:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000030000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="205865001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x8000, 0x4) 17:50:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0x0) close(r2) 17:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) 17:50:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x4, 0x9, 0x80000000, 0x0, 0x1000, 0x2, 0x100000000}, &(0x7f00000000c0)={0x3ff, 0x88d, 0x5, 0x8, 0x9, 0x6, 0x80, 0x2}, &(0x7f0000000100)={0x401, 0x7446, 0x7fffffff, 0x9, 0x0, 0x1000, 0x7fffffff, 0x6}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x100]}, 0x8}) 17:50:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200068001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x80080, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:50:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r5 = socket(0x100000000011, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind(r5, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) 17:50:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000050000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20006c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000300)=0x62, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffffffff0a0000000c0003800500010000000000"], 0x20}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r5, 0x9c6ecba443fbea3a, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f00000003c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x8) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r13, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x1c, r14, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4800) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r14, 0x8, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x1840) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000400)=0x2, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r10, 0x891a, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2951.390482][ T4221] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:50:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x20000001) close(r0) 17:50:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200074001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x6a880, 0x0) close(r0) 17:50:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 17:50:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="202e78001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003380)=0x14) sendmmsg$sock(r0, &(0x7f0000003f00)=[{{&(0x7f0000000000)=@llc={0x1a, 0x302, 0x0, 0x0, 0x4, 0x3f, @local}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000300)="0211870efc3ad612e3c3fba9f5afc374d23dd7fe3f38523f225c393251867d1035dadeb95d9c663ef52505507d4e1e8be5f1f5f40d3cd80b05c1b5e574e0fd5bd051094bc8165ea82cd7aa26dbd21c9fed474c2f158ffc80bb89502643462c4391f7b49f9371082e8fbcf69a123672c15af874d1a9597e3f7a63b7b6ebae5c89f12f031995b2f60f138c1313efa4ae4d0c844f2f8057f965e359bf4d858b4c85623fda08d5d76079ac8652c9ae23799d9c25da2a938453e0ef569c3b5d75410300139c0f42b2cfcd78bb20ae9943440b4f2f9356a79b986e3c16735674bafca2cd96b5a5cf7824aa789d4d17f7155cba9f38f4e515f7b68ad1e4422eb91e0c0db14fc9f8fe2a611e2add38cdb2398692fbff0ae3099f65f469e579af0b7ea6decefbd41264d6eab14144e2aa6c6862a988f663762f149caf98c292729d1e11dbb3f26cd63fcfb55b3df819fb74bc50dbc07fe493ebf61ee37d7ac580f8a15ad2df7d496a364eac8b319114bae274d71d134a124db13d94db5dcf1def579947b5cebbcf1b8692b135075d0223c5c0ee505d95241bb4b25ae23df57dc06629221269a4b6e074df9d13fdfc764201153f23f6cd2ad8f7ad46f86a71eade2602d32b41e113ddf582e5e0b9d7b335fd8390a17ceb536589ed866f1f8910ec5fab439b6de13abdf65d3b11b0c40d5875564a4b0161e41f484916494685b3fa2083558f45dd017b0827eb637557e4e15ce97bd32b699c452294dcd81443a99f98322b7f504bfb33b10c797a6056be133dddf09070cdc777568bf561ab515931bc3df3a04fbc8ff4585c17f378fdf0a171bf33f51505d2bdb2851f7644567a9b7b385852ec478ee1cec10901a67823bb2fbb152c10b77c88a2888ecfe86ac465415f850cf7f20370e9177c890163209a3e76252ca6c4b0dd575f9eb7f7bd427603c31cbfa267e1ec31125a86bae71b599382c9105ab6d4cc6f7160599d4e23ba882d59d11aaa6cbe49ffdbd5b5600cfd1498c32e23b5b2bd3774c25f44718d9ee4590d82d07f04e9187ffc9afb329d00910df94f20bd11ba15f0c21f6a701293e3c1dcad8bdc69b9f7a9c2c2cf994f621e9a20f2b5200795005c08dbb9129341579dec7be7c778dff8f262559435f143e3dd3d7aaee3a1a3cf4a7ab690d4ad33cd3a7fbd27257396ef7b356dfef968514619f892d943a2a4ec0fe7e8d8ba2baabf7ecde545dffdd0e714a34a547c232dd501cb5352f72a978133b572e720282f3ad59ae428e4c9e15f8d39cf14ca1430cea4080e035b69338585c7154c94d6bdb85052d81f139aefac0dbbdbb011b9b633549fdc3e87fbcce34ff5d801806714faed55a88da4210a1b1cfd91ebb109052f5f4a6d1c2df71dfbdedb39a5d25064965c4e92e9f3d03950e8a9c9bc4795535fd2a96b17f59bb99b7362398f79f3032ab42062f4d69d859ab303c01be1b213a823e5d27ab5b561663da12d34b9777564f1c561d3c9fefd18e53dc1b26c4890c5e73e69673a2d01cc7f6181dea52251ee2779ab5ce9a198000b5c2a7b9e2c23891885811f0b45bce005c47cf2b2f489d49ca83d70dbbfabcbd7725d3fbd9c87933b52f84ee1242065c4ecb88dfd1bbb5f01801b9e4d2bdca3faad16c9a633650c2a660ab2f05c206c54eee5206dfcd16ec24558cb924fc18f9c793f123d35477deb4667ddf1d04c74cc84ff322bad34ef8ba78b24cd68c98ded519c50253c97cf101a665f092cc392a9ebe5fbaf174b64b46c425f1f9de0357768dd9cc56c8edbbb89f5569ad02799eea0a186febd98167c914bd2f8e2cccbf6fa1d20aad28786f3c47a18c9a20df6fa0ca00f3e9c3b4002f5ff7de674fe614213568e40b68c0e281fe91786863571da458233400b2ce9d3690fe86c244681c8195cb47ca5b35fe77699686da3b688c32ac79b8d3110e566c5105d89c53c65a3c8931541151223f58f5d5e7771bf07d4b32c6fd2fff32580b739bfc6c01c12c71980ed7f41fe999d7b2fff3ff1fb261eb13eeb77d901a08ce78d3025874b9ca2c2edde89be42eb66551e9b6d363cd0778451f93ee7f4c54ad08b46dac1b8601816d87b55588336badefa834e64e9fd435f39bd7954766d6af5434b29ea8c51cc78ffaf10e0e5ef6dc36f9dc8522266fc8cb471728324df2d93a808f0897d3554ca51b340b5f1edb658d0d3cdc5c61cc1cefb9e87bfcd75dc9b511e39d3be29f38cf7511944cb9b8b6f112c74036fdd3d7bb829dea54ce85dba09dde7bfd61e1ba401c9c8936afe933f81058325bfb9e402a8d5a880cf6780496b6f06f33e698b8345a94da0da34ca383fc612ea2c7a07d0fc4d8db77a04e85762265c7489a544956699b862c5db64ea1e74edc88d9c7349f8250fd12f251248d818a0d7f10682492ddc189a6319260d069975e16751601eb4a0d21393df93a4c5f95b18021443d4c30f96c67b2f17431f6d6bfb267c4dd0a4d69711b884b7d57c48ae2a08e4aa5a29e0f0df61a0d374a734a74957e140b2996cabe24ea734c58e01ed89e2bedf3b9ff1a6ba00102594709ad83dfe4ab954fc7c6074a47c94427c9d3b9752b36e5e1f20da1f8fde9043fb5b4bfd666714d988a76964a98007cdce30ca5538e7461a177e956d8008725211a3ae0f58c5bfbc2b008660aae690df127ae750f0b5b4022253a82f07c22bfa62341213e939752c93844589e1dc29c9b5263b114b6e8d5d5f3c041ac6a223d26ee9ad92e563eac7c8a6a4e44c984573d28a98334a56b5cffd74cbc331179cabb045bc5660b43049e4ba0d297fc9de376a8f5eb2470a19f434f6b5e536886ff1023c6a1b20d6c76f44960e8aebfce65103e62e880dee96cebe241796aa5500e6d4bc39a9512695e846a0b9f27fed8861a4cdbbf3e6f9a32e91232beecdb4fc5261fc38295a59423135ddd99b804be1b1db4b5b919e166092cf51d5e3aa5e5b8ec5cb0224949613a81b9874508cf9d3d38e2546d84f33e0148999874e541643776a9783ecbb3573fa8b8a01ba4cad9b1b5b012d2b44ad8f106f6bb6784e603f60b2e03fae6db283afa0aa1275a4e35e7d199c08d03cddc56d7eacc911246c4c3af62a29aaee89ea46873de15103235d2daf55a884b00008ec9090390ee3dfd8c77956b058ed2f585da5a6f59a2bb161081ab738fbc0ec3876f3325be85e49021efd7c7a8b2c4edb1542c2ae2fe91fdfd1185fb0f3c0656b2d08fcf9d3664fe605c6f0aebb2480378ff4cef647bcbc9dd8ff74942aafd36fc2c55e3a1d0ba5fa8efa1aaf2245461858ce6336bece6158c24cbc143a3d9d2e0640cba455cb978e001e4647820eece7056867628d686134d8d773f60a093ff13c880c77d6f15f6d7b07366f9db98fe57a81347bd6f688dcd179572066ab9b7013ec314402ca71420cb5343f2c76fe018c8dd0e05bf4e3a2bcfeed779261dc10a3cf7ac9a15434275ad965996f3851b74e15e71172912c391b6bc180629235a301c41caa625975766ed05d6501496fbd33ed17f1e4f573beea4160a7a10ea1317bb14dd5fc5d57acc33d2dca22343618cbfa38bb3cc48713b844388dc6f9baac3a5246dc74d20df14ebbc5f19657ab2c34d4ade0456cabc3b9905f24f911d9503504bf91275e59674e1ebbcbf4dee01d547dd288bae7eadc641e59ccf62d5e3b4c4f84496c463d525bfeb6d73510050d739d4e568f51b2e991e64dce5470a4baa52980fd0de268480894101c47319f2837dd42fef7c379c01248c32955975dbd779dac23488af3db3dcdb1807bc0eecca6f1c6cdc44dac231d5810c5de42d790d1de62b48bba5072678700120c2975842b3b44cb569b2708b57f203de9a3196540e79c366589d4a4a4b2efad3c97052f2e8cc6d6f710f590d170fe89aaafd9802d9ea48f404534d471cb810e15539251d126c3c379dfbcd4c65f46fe0700faa39778c449e0a911c20ae36ee37c4fe30133783497df982f3aa1a3634aa2965f98bcc50ebbc32544733c1040b711286a37f6dbf95abcd9bf61820556b78be016561086d9bae603e909dae198e4f94509747d0ffdb3328c260f6bbaafaa989a7c33166f9621bcdf38b7af819508f2d5a833af731fc7b9c98041477d283acc1aa161ed96185f0a9cbe08bb2cf7e66e9bafb58cdbd36af2aae3b528fae2ebbe18eff40c72951b985cdcac42649f93d3ca2adcf93841f01cedee2849db7d0b1b4b1ab20d37b21bbcb608a310eceebef7788993e77563732dee65a51dfbd35659d708191c60d1c9a16952014505b02a00a8b0650dfd7fff8323e8f1d25e421470f16335214bf06518ae0716ae2bf9b53759b748b97e8936da0de32c2ecb63d175b1f2e5c64f2397f1540e9e0aff09659311539386d3b7f2b137e32eb59db8e2c5b359e5e844b1f5b71386829fafd079ebc1f9e2514941167f6e17a24e136f5fdeb4f144c7c4ec72863f7d74ca31ac450244c7b107c350dc8d68a3f1480fa68f1acc25de386f0547251230ce5f03491d19ad38f5dfc01fd247f479222715f9ee14cdd7fc05102440b130fd3eb4dfd217fbc32662915ac8246c4a466e938f32f4047885d00579364ed28535f7bc59f8c43dba74528f5036aade36761bebd3164355543600309399acfd20caa373ce7c4e1647a3ae0ae32e95174d8c705a56ca8e6dd73982446fb10ab9d3954f78d3714f3de5768f706517460040b6bc96ce69e35850bff83055b4efbfafb187df1e79a0697be121728c261aa7e6e5e00e0988b3146d9180322a63f738e60b54fa36accd3557042b0cac072ad574e84ce2e5aed77ae665905a159222bf90312185bcf7ecaec2b524bcfb5ccb0bb5791f182e7b4edb62dc8476157f1401d2dbdf0289c6b7b785031bba31c9c221e474b3d4b6bbd5fe3003497bb87b05d630fe5404c0f9f2331d42550b02c457ccd83f68f863896ab278f63cd1287c8404a502f6f0299725c9acac35442540ef1752c67d75e594c5dfde1c61e9a7af40469c3f3248e3ba84df050ac3db04fe8b56e0d6f29d55b93b67053caf219ffec6f2f3faced5fae99e5897b332bb855fcef7a7fcde2bf6df8d9b589784c72380d4fc09e3c7a9858c605be2e3a66d93c9e1dd2555ce82b274d2777194fe814356c784fae82ae5bf33885cc5d39f7eb129e71b20d7deb33c4a1dbf998d2577fc1120d9dc8b9678dc9ae530322f1e0fe44c6d2fa2bd5fece98d6c9ea0a87b74df924d201a53841e21930f602ff562582e08304be401907dba6b8c6b116aeb5f6b2681d6a7671363a430a697f7135592bdcefb74edd34c67731fd8a624610919f8754a974a4c0a9aa5a88cae7929feff22040aeca7964b0596b8b2f1ee8be4a4496d650248212681be02ad7218d4fc22087af735c0bf664741d1ce52b7010fd3ff45b0bb531e8bd16f6db5fe8d68cd0ae9c36b1139618d5d07eeed16de68b9abf1d332532c9fb83723bb1c470faa27d4fdcd5f0a7324ce9abfc8e2b492e21439063fc602a8c8c89dff018b191a209fe1afd96d14106a4281b04da1609548170e30bbe3bbb0704fb1248c88023629fd8b8e42126090992165e1bff336ef2a5f74c3d30c1ce1299c7d6589f6e87fc21a089afa393306fa628da7d5a87cf2b0288dbb2640165739fbc72a88a1e46f3d77976796fbf5bef44af8117baa8dfd886d6a25e08e8ba50e58085e5fcd9b5c491d0475c380ff116a653915f484ee8bfea0137f3605dcc88699d4cc4d7037f40a46156d0c8e4a76fcf5dc3c9400de75614fb59d0e50273314c326413305eb940c0d1197571288fbbc17ee5b", 0x1000}, {&(0x7f0000000080)="f5ca3af6876dc710142f51b6f52db79ac213acdeece1eb851aaa149dcce89bfa647194ce843e14fc4aa56cb254", 0x2d}, {&(0x7f00000000c0)="be55bd18389296a7d99a651e573a689155ca413ee076cc600edf403d6a4ea63913c7039c6efeb38bb78f9b4690b127e09abaf0210c623e1b435742a6f1421bd5199598f33da5b13171b0ac4ff23701687d7e435e5e617e341b30df21c130316d4f912fd9b7a24160ed35ed381247483a7195b473a98770d780556d2793f7acdcbc1b9752b79210314904fa4296cbfe6e43d7befd97c2e49b53958887cc2454b4e4ee56ce1caf82eadd5804544058b982a2e069b13befe236b28a5f990ce32bf8f1caf30d8398833dfb807c37461ada294c9d250587e1ee5cd40656bd97e7899956f3c95cfa915a", 0xe7}], 0x3, &(0x7f0000001340)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)="ce61939d487b73d5bbb0edae8323965fe9ce29bd5de84ee9c6646cd58b0c39f6f923d52b024b8805c29b3c472b586484a1cc73f470a152e02a6fc7bf02adf9368bc18feeef6c6db24012f1016fd4f6aeb82dcf9f3304a859fa3a4dab507d511b891c60f337cb768f9f5eb28f6f6290c7b567a05f959a5df2d13de712c49a497e646f2142b5bce70070a2ba4fe7872d9b061c905b26c3aff15ae58260cc8db37e305ee059f8d1f6ea95b6232f5c75a147640c7b", 0xb3}, {&(0x7f00000014c0)="c6da24d8202edce13d29bf1978d14837e5a02bfc837015b77028805f3518ee1224284c5389db9713b536736aa29bc908e1ffc6393f6bb11cd61597f6074893006e22f540340135dfdf13b06cbc2502da9d5a309c1d6867a157d0141e", 0x5c}, {&(0x7f0000001540)="99a3a7ea7fd72fe1890e2b6bf6e0c0146f704aa6de53c8b0ab3a2ec033195c98ca5b9c3414523275e2f327984eab60d55b276c8a3e0d93a79da75ea71f90132c0468b758adc4464517bbb50376460731c9ab81f45f58a4e6b90fa6e6cb5b406a032c846edf9c1dde169ca48fb9030f5e492514816c8478c4eb7be43955912da5f4d72b57b348ac91025d47319f0fce01d7f521a107347597cdf531fc74bd3fbb7705121b74d8e5608ee2f1d8", 0xac}, {&(0x7f0000001600)="b336bdb40f11103375241cafbe738c2259b80e66f698241668c1932d4418b1ecabfe436e2d46961fa79582f90e32683a5ead", 0x32}, {&(0x7f0000001640)="4fc10c9006d0ba03edc524f816eb4c7bfa95745aee6182f41a1ef815e4104fe48f36294b9399499b072c99c92fd69e2766b71d49bcb25bc991fc67a202cc4550fc9beaaf394591228a9014eef33903fc69fbc2da938819cf5044f7b2b98fceadb611ae0c025076bf3bbdd98ea0d92468455b4869dc77a5832c33a3f080b372e66035e4b11fb008cabcf65d8bf209ef20ab27c77543", 0x95}], 0x5, &(0x7f0000001780)=[@timestamping={{0x14, 0x1, 0x25, 0x54}}, @mark={{0x14, 0x1, 0x24, 0x38b4}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}}, {{&(0x7f0000001800)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)="e8e97f4d5c68f50a3106a471cd044848f055985878f37ccd10288ef1f723d5cdbfa3801edfb642de41b87f08b0e80b9e955c9a49d474d7af5bef9d53b0a762ac5b13b258ee8b600b549838ebb97f1d81314d35c77fffba80bef00f259c2871569717219b6ceb662ffa853b4c68004be0bcbb1aa8d0201aacee5722f2b0424f31fef326c66c2dc66f8402937f8f684d07854edd882ad323155d152f44316b31a1b9a738868b7546d24f13bf6aca1e794f64d36595d56c69723147c3a43f743dd17808e39c63ed471360ca59503929e58fec4e703be4188f28e78f3e0373dd9caa696a338b1c6383cfd81db38d91dbd323cd1cca", 0xf3}, {&(0x7f0000001980)="708502cafec6018ffad03c3eb48bba08700d7e2b254fb494993e028fcf4aa89dd2f937b575830deae25ee494e4525b8851c5f225aafb756fe8c049a3dcd5b00d5b37b66c0f32515d790efbdc8e3959a375afa57d91a588253e2fa28c1027152d46d71167b3adc49edfac642326c9adb2b2f13e73002136cf9e967246d694288e441f3e617bd4707e680c74e9003259bccb18ef5c856988cfe9e4b3f701582ea68b7313b997e3409bf854d74052cb4d4ecc3900a99129d9a6c520033b9b52a4848b2be29ff84fa0f46a0ce8ad6e6cc26f359948d06e2a5b5dbdfa84", 0xdb}, {&(0x7f0000001a80)="98cb904ae0a51b55ec24d81ed47d70fbcbf9078261eb8ca7ff35b83033823983d014153c5ea6ca6a9f3fe8d67443db05e40f6a105e2633442149f9d747e2c2e1bf5ef8f0c0f01186849846b8ee0a5a8b410629c40226d620aad56025f92205e7ffcf3901ee41a9f327fc95a6e25049a41931a76fdd", 0x75}], 0x3}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b40)="bf11", 0x2}, {&(0x7f0000001b80)="9c751fe094d981580e18271822d96d8f0a3877deb5d881b20ce6d001fd7b9ebc2a7fc319cd64f7450b9d5d39f365b64b6a6c86d8be692cbc7b1cfe690f32d5a7316c27088db03510ea7c44f86650f0e48fb1e00c4ca550625d1d2aa10d07d1ca08cf8a2a0fce2d524bfc5d3824d7083e0bb485b01eeb604f", 0x78}, {&(0x7f0000001c00)="c802553e8ddd1b23f06bc21f6caa8ebcedaa9a3da25e3b144c7425aabe392b5e6db1069bcfef", 0x26}, {&(0x7f0000001c40)="912fbd1330d672d76c08c5f916e665501e109588188e4da9d9d9b1714e819c5722ca72b95f1a71df2b7e26cf077259bb1a414aaf6a2832065f463ea4d12e1154402949fe4780c9902cad224a829e111fa2cf3bcefb1f62c2ad77808089b6a939dc94aae8e1da1b40749d0c97e8a9f44a05e38d15f14c1ab7e86d820a6103702d5339e66b956acb65e64fd7260eef71e9c4c9da672dcce601", 0x98}], 0x4, &(0x7f0000001d40)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x89}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x90}}, {{&(0x7f00000033c0)=@ll={0x11, 0xc, r1, 0x1, 0x80, 0x6, @broadcast}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003440)="9e45b0a017f15f5153ffd6702d6e8888fdb0775b1237ac538ffce0e8287eb777b34ccab07d3660bffcb7e90d6f7bb7d293a69eb25b8feb9a15cf6d21b6f3e1b822fd03555c6b90d96ae45c8c68265ca93b241174ae88332606", 0x59}, {&(0x7f00000034c0)="e4bbccbb63ed6ace4ea66010deb392b7f1d6fcd3af364bbbe2476b167ff19b40d8c56838492a2d87c129ed3cc0a67d1b8a4772773341aa751d7057a345792140ac76d5120b7ec96693df024113dc622275109a4e1c6309c5056a040903b15159afd7fcb76358419ddce06880fe982faae5356b9a", 0x74}], 0x2}}, {{&(0x7f0000003580)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003600)="63e12f10a690475cb826531edc580d54613688ff857cfeb8fe0af3e7efa9be9e5e19ed7a5056d3793ccad8352ee5bad05e334649e0ee43752d739ec724812e6799e7f6afb6122a014610ec212b9efb5955294f205490a9941dc60f1bc87f958709047b6d7f4f24a91088f1379adfda150e53974d7b292563ddea958425a73bd24e8eaf9b6b50197fb6447b46c04d722b3b954c909a8d18d144712f8183ce86ecf65e955caecb3c6cfd14505c864529b99f8479bdc7391fa9d3e187c6890b317b948c2e", 0xc3}, {&(0x7f0000003700)="807f74c7d098b207ac41e0a177f2cda08da2ce742ad7a53d89a3dd804f322c1f88ac0b27fbeba20ce3e56115", 0x2c}, {&(0x7f0000003740)="ce15f9c17a2499cb6805344f8b6b90366afe13bf59579e94dd23fbcde42ff7e75b14c455c7247e4fe254fd36d0da97b9851381e3f1f120da4b897697a828b5af00512c6f474a4d0979d410609fe7354da9d371487c41821e89c7e4f59c86b62c0afbc52b541e16db3503d4aa2fd7c2df01da2ed6e6ca58897a0888ac81ff93b31b70cb90daf5b885c0af516eac9948ed921b84b530ea6bf45315c45b4b3e26f77d", 0xa1}, {&(0x7f0000003800)="46405c2ee9cb2aa3efe2164018c379914128198ef2493dbe8a04340f095b280612e3bd7e3c390b72c1817c1324a4b0833dc6e352f1318d25cfb140905db5b3a67a5ed40d97c278fd448ee1c01b46edb2ad27bd8f961486768cb79aed0e66f3c38b19972c7ad24c1dab3fc0e262f703368120a1b455af77ab83cc150653da55b604d279df4153f90dd963f85d7b3a160669a386a0c5f3ee4b5233e45cbeef188be6a342798923852efa016a538ce1b9ac6ddf7af8efae40abe848ec15350169812717b5b6d84c2bc624ad2d467367b4eb7e73fb", 0xd3}, {&(0x7f0000003900)="640b332f5d3fdebad938cacdba02471867a199fb50e98695ac96680f249e3f910d85b4f57937300849f853f70eec22baafab51faf538217fced5c0676cfa2a422153f20f36a7e9ade140a05df198247a53423af7848333b36bb0f84a7d9d5851475e0a0ffda63888829a18c2ec8a8dc3801cd46b1c90a9dd6bf721c11e2180c3fe0e49d5296ed9ed8b", 0x89}, {&(0x7f00000039c0)="aa8b15830ae40ce865662a7b640813e89fdc553472d0966807f9020ccae5bd47a9ace6d14304da9e7b4286d34f1c87", 0x2f}], 0x6, &(0x7f0000003a80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xe439}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}, {{&(0x7f0000003b00)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x0, 0x4}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b80)="d31a10f51c94895b38bd7b0ffdc2ddc3e6c035e5cae8e2535f9dcb2aeaa7068cbeaf10ca4fab513ab304f4e1b6199d734ff1ad6cea42220aa251c53ad61698b407b04c3207260034e7aa23f4d743a1fdffec512ab4ef38821784c70bf9e76ba0ad27d442cdaaa0f3fe4346a5b0cf3d4daac0f4f853fc90c1bc3eb28484b640a0521ecb5bfb629a186eb0b2387df008edaa66edf060154232537ecd87fabd9cd4534294e940f76fc1528177ebd166dc1660a73352137b2b9eb29007aba1999bdd73f613b61a2fd8f73a79c97a5baa1c4304807928668b4ce0d8", 0xd9}, {&(0x7f0000003c80)="edd0dfd8b0de5c2736736e6ad92e86591efdc021aa8c2fda8239052f6cbc235472bb009376cf81982c7fd23168ffc59552a6ede6d3e0f373ee790fc4723e261f969d88d0b2321368ca27a7d16beb836e6c63312911edaa1134a23832f46072d35baf094cb3fad9f659007824742379ddf08ceee5e0cdd5f9604e9a68e9d32996ef462c2b620a208087f4cdf35b504e94c5fc2e83084fc0cf93b73135a094ac56c94e0fcf5b2f75e9718a2d990ab591aa9370", 0xb2}, {&(0x7f0000003d40)="fd70c650348419e644711aa5781a4a0efd58fd2707ffef13931f2a7892e21727957c8c6ec32a222d0279c2696fbf2e5dbfb14250b9b3b4204da8c9982b275f5e8fcb7fd3abd8b563329b8b997d2be041", 0x50}], 0x3, &(0x7f0000003e00)=[@timestamping={{0x14}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @timestamping={{0x14}}], 0xd8}}], 0x7, 0x20000040) 17:50:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept4(r2, &(0x7f00000001c0)=@can, &(0x7f0000000240)=0x80, 0x80000) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x50) 17:50:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000070000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_out(r3, 0x5462, &(0x7f0000000040)) close(r3) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000000)=0x1, 0x4) 17:50:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2440, 0x0) close(r0) 17:50:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20007a001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x80, @mcast2, 0x60e}, @in6={0xa, 0x4e23, 0x3, @empty, 0x9}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x20}, @in6={0xa, 0x4e20, 0x800, @mcast1, 0xffffff01}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x30}, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}], 0xdc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x40}, 0x4) 17:50:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x204000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = accept(r1, &(0x7f00000008c0)=@l2, &(0x7f0000000940)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev, r9}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket(0x11, 0x800000003, 0x0) bind(r12, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000000)={@dev, r16}, 0x14) getsockname(0xffffffffffffffff, &(0x7f0000000b40)=@xdp, &(0x7f0000000bc0)=0x80) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = socket(0x11, 0x800000003, 0x0) bind(r18, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r18, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r17, 0x29, 0x1b, &(0x7f0000000000)={@dev, r19}, 0x14) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = socket(0x11, 0x800000003, 0x0) bind(r21, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r21, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r20, 0x29, 0x1b, &(0x7f0000000000)={@dev, r22}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c00)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000d00)=0xe8) r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = socket(0x11, 0x800000003, 0x0) bind(r25, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r25, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r24, 0x29, 0x1b, &(0x7f0000000000)={@dev, r26}, 0x14) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) r28 = socket(0x11, 0x800000003, 0x0) bind(r28, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r28, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r27, 0x29, 0x1b, &(0x7f0000000000)={@dev, r29}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', r29}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000005240)=0x0, &(0x7f0000005280)=0x4) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = socket(0x11, 0x800000003, 0x0) bind(r33, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r33, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r32, 0x29, 0x1b, &(0x7f0000000000)={@dev, r34}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000052c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000053c0)=0xe8) r36 = socket$inet6_tcp(0xa, 0x1, 0x0) r37 = socket(0x11, 0x800000003, 0x0) bind(r37, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r37, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r36, 0x29, 0x1b, &(0x7f0000000000)={@dev, r38}, 0x14) r39 = socket$inet6_tcp(0xa, 0x1, 0x0) r40 = socket(0x11, 0x800000003, 0x0) bind(r40, &(0x7f0000000340)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x80) getsockname$packet(r40, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r39, 0x29, 0x1b, &(0x7f0000000000)={@dev, r41}, 0x14) r42 = socket$inet6_tcp(0xa, 0x1, 0x0) r43 = socket(0x11, 0x800000003, 0x0) bind(r43, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r43, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r42, 0x29, 0x1b, &(0x7f0000000000)={@dev, r44}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r45 = socket(0x11, 0x800000003, 0x0) bind(r45, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r45, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r21, 0x29, 0x1b, &(0x7f0000000000)={@loopback, r46}, 0x14) r47 = socket(0x2, 0x6, 0x0) ioctl(r47, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r48 = socket$inet6_tcp(0xa, 0x1, 0x0) r49 = socket(0x11, 0x800000003, 0x0) bind(r49, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r49, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r48, 0x29, 0x1b, &(0x7f0000000000)={@dev, r50}, 0x14) ioctl$sock_SIOCGIFINDEX(r47, 0x8933, &(0x7f0000005a40)={'erspan0\x00', r50}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000005a80)={@multicast2, @initdev, 0x0}, &(0x7f0000005ac0)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000006580)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x22200000}, 0xc, &(0x7f0000006540)={&(0x7f0000005b00)=ANY=[@ANYBLOB="b4080000", @ANYRES16=r6, @ANYBLOB="00082dbd7000fedbdf250200000008000100", @ANYRES32=r31, @ANYBLOB="d401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000004000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000004040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400c000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004006c07000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004008100000008000100", @ANYRES32=r16, @ANYBLOB="0400028008000100", @ANYRES32=r23, @ANYBLOB="b800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004007efdf316080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400010100003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r26, @ANYBLOB="340202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r30, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400c10c03053dd300000700b426000001000600080680000000f654ff03faffffff110aa600070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r31, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400f7ffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004006e68000008000600", @ANYRES32=r34, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r35, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f9ffffff38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000b00004000800000008000100", @ANYRES32=r38, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=r41, @ANYBLOB="e3ff028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010008000100", @ANYRES32=r44, @ANYBLOB="30010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r46, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000003c0001002400013ee67cf264ede61c6e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r51, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r52, @ANYBLOB="e801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x8b4}, 0x1, 0x0, 0x0, 0x20000814}, 0x80) socket$rxrpc(0x21, 0x2, 0x2) 17:50:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000540)=0xe8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockname$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x6b, &(0x7f00000006c0)={@local, @dev, 0x0}, &(0x7f0000000700)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x204, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x65a0}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4004844}, 0x44090) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast2}, 0x8000}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000340)={r10, 0x8, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000380)=0x400, 0x4) 17:50:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20017c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200081001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000000c0000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x6, 0x5) r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)=0x73) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x0, {{0x2, 0x4c20, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0xffffffe9) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket(0x2, 0x6, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r9 = socket(0x11, 0x800000003, 0x0) close(r9) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r11, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r11, 0xfff}, &(0x7f0000000500)=0x8) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r7, 0x0, r12, 0x0, 0x4ffe0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0800}, 0x2000c858) sendto$ax25(r6, &(0x7f00000002c0)="fec4f8de6255edc7f93e2821deff6ce3040faeaaf7e32d276ded68adc3970570e13ff440d023769b0b08014e", 0x2c, 0x20004014, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 17:50:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:50:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:50:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000f0001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:50:59 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x800, 0x4) 17:50:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000004000138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:00 executing program 0: close(0xffffffffffffffff) 17:51:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007300138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000110000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:00 executing program 1: accept4$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000180)=0x6e, 0x80800) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x2, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x3, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x80000, 0x83) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x75, 0x0, 0x602, 0x0, 0x2, 0x80, 0x3f, 0x1, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={r4, 0x8}, 0x8) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x8000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x12002, 0x0) close(r0) socket$l2tp6(0xa, 0x2, 0x73) 17:51:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x1, [], "dbc301b13817ca3ba12e7f7499d34be8"}) close(r0) 17:51:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200002001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000002380)) getpeername$netrom(r1, &(0x7f00000023c0)={{0x3, @netrom}, [@null, @netrom, @bcast, @netrom, @netrom, @netrom, @remote, @default]}, &(0x7f0000002440)=0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=""/85, &(0x7f0000000100)=0x55) close(r0) 17:51:00 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000001c0)={0x10001, {{0x2, 0x4e21, @rand_addr=0xdb}}, {{0x2, 0x0, @multicast1}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002d00)={0xffffffffffffffff}) sendto$ax25(r0, &(0x7f0000002d40)="4a722aed716d811ce50574e8", 0xc, 0x40010, &(0x7f0000002d80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@bcast, @null, @default, @default, @bcast, @bcast, @null, @bcast]}, 0x48) 17:51:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev, r8}, 0x14) r9 = socket(0x2, 0x6, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@dev, r12}, 0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'geneve0\x00', r12}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r15, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000000)={@dev, r16}, 0x14) r17 = socket(0x2, 0x6, 0x0) ioctl(r17, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") accept4$packet(r17, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r2, @ANYBLOB="04002bbd7000fbdbdf25060000003c00018008000300000000001400020076657468315f6d616376746170000000080003000200000014000200766c618d310000000000000000000000712071d2af30ce0818e484c85e56d58400018014800200726f736530000000000000000000000014000200626174616476300000000000000000001400020065727370616e30000000006a000000001400029ff200766c616e300000000000000000000000080003000100003c9e00140002007465616d5f736c6176655f30000000001400020076657468315f6d", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r13, @ANYBLOB="8c000180140002006272696467655f736c6176655f30000008000100", @ANYRES32=r16, @ANYBLOB="140002006d61637365633000000000000000000014000200766c616e30000000000000000000000014000200626f6e64300000000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=r18, @ANYBLOB="1400020069703667726530000000000000000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 17:51:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200003001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000003f0000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) ioctl$int_in(0xffffffffffffffff, 0xbcd61752a780acb1, &(0x7f0000000040)=0x80) 17:51:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200004001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000009440)={&(0x7f0000009240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000009380)=[{&(0x7f00000092c0)=""/154, 0x9a}], 0x1, &(0x7f00000093c0)=""/67, 0x43}, 0x40002101) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x851) 17:51:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x80000000, [0x1], 0x2}, 0x10) 17:51:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200005001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x80}, &(0x7f0000000200)=0x8) r5 = accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:51:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x6, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000180)) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r4 = socket(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r5 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80000) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="090000000600467794d911ddfa9bfa72b52937a35812fd3458c55cb45b3efc60e689c1a1238a091c5f80f8bad664896d55d0cacd54b0ec43d0af02315f24de2d3cadff0798249329053ea951572102d15e84729a545a9f5459"]) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@remote={[], 0x1}, 0x5, 'virt_wifi0\x00'}) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r6 = epoll_create(0x80000000) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0x6, &(0x7f0000000040)={[0xffffffff]}, 0x8) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x4, 0x8) pipe(&(0x7f00000000c0)) r1 = accept(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd6a01f85acd580f9}, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 17:51:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xfb}, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r2) 17:51:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000820000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8500, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@random="d58c7e1938fd", @random="6ea9517ec327", @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = openat$cgroup_ro(r7, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0) recvfrom$l2tp6(r8, &(0x7f0000000280)=""/217, 0xd9, 0x40000040, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x20) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x20000000) close(r0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) 17:51:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200006001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:03 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)=0x0) r4 = getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r4, @ANYRES32], 0x1c}, 0x0) r5 = getgid() r6 = getpid() r7 = socket(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="1c00000c0000f6ff010000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB], 0x17}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r9 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000001c00000000000000010000000100000044b6f361ce0eb00fa74e9647"], 0x2c}, 0x0) sendmmsg$unix(r2, &(0x7f0000000600)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="0063f12f0f4cf0af94c5b3db1e3a98f9e6480a3208e7a7cf3e6056aa10849e5f81a8a352e08033231a569d35c3efd10231e72dc198225c9448f1acb7930fd8c1a9", 0x41}, {&(0x7f0000000380)="f997515da3a0eb5e65964df4392eef19d4f66ba4ee493700d92d94df4e22f6b76f0276eef135c8b4d048472b642cef291af0f10f60e4d55bff8cd5ac2801b5763f279ce4a5b83fc50b58829e6717c0fc4881cfaf2f9442fffcc8c070132ec846b4ba4b7c8d44e8e7fa1e4cf88d2462a6939ccc4ec88c71c48facb352fd75f61167602895328665b3b95414442ba60bb52c13d4c96e7c8089e64d70438d8877364ab7acae9d95de84dcf2119bc5ec1a40b24de6e70c03e56fe293cde3e946c60677", 0xc1}], 0x2, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x58, 0x4040040}], 0x1, 0x20008000) splice(r0, &(0x7f0000000000)=0x4, r1, &(0x7f0000000040)=0x7, 0x0, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200007001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev, r4}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@mcast1, r4}, 0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) socketpair(0xf, 0x5, 0x40, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r0) 17:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200008001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x3d0d7f582594bfd1, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2}, 0xc) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={r3, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="3093b34e1938"}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000022000000350000000000000085000000080000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64deb09e3732d498}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, 0xfffffffb, 0x7}, &(0x7f0000000480)=0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0xb, &(0x7f0000001780)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYBLOB="00000000ff0300009500000000002cfe5f09636ac21fedc09a7aa91020024e4ee9293ff67c07bf4d2d743082dcfeab0fc88ab50d2d6ff7f91b0643353fcfbc2e2b13f61e31ada71df7"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x8, [], r7, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x8}, 0x10, r9, r10}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={r1, 0x10, &(0x7f0000003ac0)={&(0x7f0000003a40)=""/90, 0x5a, r9}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) close(r0) 17:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={r5, 0xc7, "e77f459360b114f9c8c0765213dd43353a2f9dbfbc7b255e7d244df33a934d0cd0794df2e7a2f4b4325f1381f7c756db7102d261e84b6cb6f650278f362a47cad103d5114a565432ea48067c23563c194a878c4eba2ae3f4342314465dbe0d6cc780d6c4fdb5c6436c7862eee99e0fe42aecf6bf4d792ec40406fd61b867d9dd69ceef98cc4f2da97f1ce541a7a6b029a3a3d1f70871294ec66f77c22fb156f3384cd23bb4999761b857a7e8ce9c51c93b71f1ebe6147d5219f7ff650dafa4c3515e6eaefc7282"}, &(0x7f0000000140)=0xcf) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x8000, 0xfffffffe, 0xee, r6}, 0x10) 17:51:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000001000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000a001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2900, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x6, 0x8, 0x81, 0x0, 0x1}) close(r0) 17:51:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$inet(0x2, 0xa, 0x2) r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000540)={'veth1_to_team\x00', 0x100}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x20, r10, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a8, r10, 0x500, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x94}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x70fa}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r5, 0x9, 0x6, [0x200, 0x2, 0x298, 0xd43, 0x8000, 0x7]}, &(0x7f00000000c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000050}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000080601040000000000000000020000000900020073797a31000000000900020073797a30000000000900020073797a30000000000900020073797a310030000000000900020073797a31000000000900020073797a32000000000900020073797a300000000005000100070000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000810) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "7fc9a00cb9b48c2f3d3ccfda6d0af0c2a73ca9e06953e9d19e97d0edd5267c164e0d85933b85c8c30d26135cd48573b9f80201a2"}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "ce898e413035f2c0756a212fbf4285bebce746926f2b378e56bbcecce1ed5214"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) r4 = socket$inet(0x2, 0x2, 0xe3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) 17:51:06 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x108) r1 = socket(0xe, 0x2, 0xff) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0xff, 0x62, 0x1f, 0x99}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair(0x26, 0x80000, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x8000) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r5 = socket(0x2, 0x6, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x4}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2962.612610][ T4652] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 17:51:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80280, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) r2 = socket$isdn(0x22, 0x3, 0x21) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000100)=0x9) close(r0) 17:51:07 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000002000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000e001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d5419ccb471fab9, 0x0) close(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYRES64, @ANYRES64]) 17:51:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000300)={0x0, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @empty}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket(0x2, 0x6, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) close(r7) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r6, 0x0, r9, 0x0, 0x4ffe0, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x2}, {r0, 0x24c4}, {r4, 0x85}, {r0}, {r5, 0x4280}, {r9, 0x5010}, {r0, 0x2000}, {r10, 0x46}, {r0, 0x8}], 0x9, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={[0x9f5]}, 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200010001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:08 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x108) r1 = socket(0xe, 0x2, 0xff) bind$isdn_base(r1, &(0x7f0000000000)={0x22, 0xff, 0x62, 0x1f, 0x99}, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair(0x26, 0x80000, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000180)=0x8000) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r5 = socket(0x2, 0x6, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x4}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @reserved="a92d73b9aea11bc40a65d2a9d7d37c929f97bc2c88e4e9eaf1ae1d86dd9d3801"}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200048001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000003000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20004c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200048001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, &(0x7f0000000140)=""/47, 0x2f}, 0x40000050) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcf47ad50668fa3dd}, 0x0) 17:51:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200060001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000050}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000080601040000000000000000020000000900020073797a31000000000900020073797a30000000000900020073797a30000000000900020073797a310030000000000900020073797a31000000000900020073797a32000000000900020073797a300000000005000100070000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000810) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "7fc9a00cb9b48c2f3d3ccfda6d0af0c2a73ca9e06953e9d19e97d0edd5267c164e0d85933b85c8c30d26135cd48573b9f80201a2"}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "ce898e413035f2c0756a212fbf4285bebce746926f2b378e56bbcecce1ed5214"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) r4 = socket$inet(0x2, 0x2, 0xe3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) 17:51:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200068001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000005000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 2966.249097][ T4793] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 17:51:10 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast2}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20006c001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000050}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000080601040000000000000000020000000900020073797a31000000000900020073797a30000000000900020073797a30000000000900020073797a310030000000000900020073797a31000000000900020073797a32000000000900020073797a300000000005000100070000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000810) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "7fc9a00cb9b48c2f3d3ccfda6d0af0c2a73ca9e06953e9d19e97d0edd5267c164e0d85933b85c8c30d26135cd48573b9f80201a2"}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "ce898e413035f2c0756a212fbf4285bebce746926f2b378e56bbcecce1ed5214"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) r4 = socket$inet(0x2, 0x2, 0xe3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) 17:51:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000000080)={'ipvlan0\x00', @ifru_data=&(0x7f0000000040)="b6ea60fae437597a7cdd4578c719c429fd5d90884efc852999c1469392dc5ba2"}) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x28c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @local}, 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc73}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e76}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd148}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x200040d1}, 0x24000001) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200074001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2967.233505][ T4836] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 17:51:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket(0xf, 0x800, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x6000888c) socketpair(0x2b, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt(r0, 0x7fffffff, 0x7f8000, &(0x7f00000000c0)="1fc0ef6cbd82a5ff1e9a713a39d26d3414e5a62ac8e9710acd2a88ad6b33c0056142ebf47705ade40c04a55d464f6fba61b0202d76cc09c93b6e021927ac5a0b544c1accb18fc45a9a48", 0x4a) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_create(0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)=0x800, 0x12) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1f, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x8, 0x4, 0x8}, &(0x7f0000000340)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x5f6}}, 0x10) getsockname$tipc(r2, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) 17:51:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x6, 0xa, 0x40, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000100)=0xfffffff7, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 17:51:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000007000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20007a001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000050}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000080601040000000000000000020000000900020073797a31000000000900020073797a30000000000900020073797a30000000000900020073797a310030000000000900020073797a31000000000900020073797a32000000000900020073797a300000000005000100070000000500010007000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000810) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x38, 0x6, 0x1, 0x0, "7fc9a00cb9b48c2f3d3ccfda6d0af0c2a73ca9e06953e9d19e97d0edd5267c164e0d85933b85c8c30d26135cd48573b9f80201a2"}, @NFTA_SET_ELEM_USERDATA={0x24, 0x6, 0x1, 0x0, "ce898e413035f2c0756a212fbf4285bebce746926f2b378e56bbcecce1ed5214"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4000, 0x0) r4 = socket$inet(0x2, 0x2, 0xe3) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) [ 2968.155136][ T4877] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. 17:51:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000f0001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:12 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000540)=0x4) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000480)=0x4) r5 = socket(0x2, 0x6, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000100)) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000300)="3dc077f65696e88d0fbf225e423e60b7300c17febdf6afc51f4df4ec65bfd20c5fc4e9efcacfa492a2b9983b18bcd95f83be9bf99ab58aa74a54a595f0985cf20d01afe65c69a8071dcf1680b632125376ecaff711614820aa3c923f8701029aedb6bc3287907bcc8414049613953eff6ce505248ef88e9d92515c0d4a50858f923d498bc1b1d41bcb9a66b15b78f5d0f1d18499bf415f571b08e1ae85f338218e81333b8d101efa32a1178c0943e95dae8698290b5e8ed871bad372dc8cbb35d4d2926dbfa74b6095f5deb34b85e9cda82cd2dbbb15485bcbfbf5d1d9d9bc18") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) splice(r5, &(0x7f0000000040)=0x7ff, r6, &(0x7f0000000080)=0x80000001, 0x6, 0x4) r8 = socket(0x2, 0x6, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f00000001c0)={0x4, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) socket$isdn_base(0x22, 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r14, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r16 = socket$inet_udp(0x2, 0x2, 0x0) close(r16) splice(r15, 0x0, r16, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r17, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) close(r19) splice(r18, 0x0, r19, 0x0, 0x4ffe0, 0x0) write$binfmt_misc(r11, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRESHEX=r13, @ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYBLOB="ace27f623394c9fbc87b17cf7a3ccaa0064de3649a5c8771cf592254f4c2cbb375cbd931c50ac35753937ef3369004ac5ebaba10ddef82e0177ae11eab6ab8cce76a764896e36dfdc1b163fba527487a53ae3ece056a5d393449d1262b630cc91f8dc3746654ce5f0b8467b147f6df00c5d2a562832615c684cec93ca747d45d5dfb4a82e87f0f7a096209c3c604ee0d9c11a8283b6e66542a02ce9a10f1460271830fc2", @ANYPTR, @ANYRESDEC=r14, @ANYRES32=0x0, @ANYPTR, @ANYBLOB="a69447ce4e27a354142c51f56bc1624f951d1c816fa393d0fb94546049a34ed6c55bf6418cf3fc63f36145fa4027e7341b9a1e0885348bfffb1079ecd2c17cca16759777b2be5e0a004bae06156dc68710f3986307afab1ac5efcb3db8678516f951d880da1e768a171d76d11d88eae1d96db8cb77a96f642794cc3527c1e666c11c2604daed1b34da44d99ae617b3945bb4de201e647b88865c816fe58c70b0ef394817"], @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRESHEX=r17, @ANYRESHEX=r18, @ANYBLOB="294707ca4c68a8c58e0a8100f0f853e569a6a5e556ad6538d011efff7bed37a60b55f6b04639d33881da149609a4d43b93abfb911700863aac36bee31d03893d09562780db2bfd5b7be799372efcde1cbc1a5a11b4a5f760ce6a6ba4e68c0ed6d1a3517e6cb069", @ANYRES32=r9], @ANYRES16=r15]], 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f0000000140)=0x7, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000003f0000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000008000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20007c011100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0xffff, @multicast2}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:13 executing program 1: r0 = socket(0x29, 0x4, 0xc0) r1 = socket(0x11, 0x800000003, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x1bc}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x8, 0x81, 0x3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x20, r8, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xe0, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe5d2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xecb}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 17:51:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000031100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:14 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000180)=0x80000001) r4 = socket$inet(0x2, 0xa, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="4c00000001000000048101e57f07e5081cd4000004000000cd000000090000000800000008000000090000000800000002000000a9101d5b0900000003000000b106000000605adca818c20d133d1fdedd2a5c6c4b3bf8637288328ec6af837b4b3ecc41dfeb4818915d04ae129dac0e5a37a86ddaff8e7f022eb806136ad05bbfd9cce44305db9fc770c98d25435432"]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000001c0)={0xfffffffc, {{0x2, 0x0, @local}}, {{0x2, 0x2, @loopback}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20006010) 17:51:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000051100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20007c011100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80000000000c000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000002380)) getpeername$netrom(r1, &(0x7f00000023c0)={{0x3, @netrom}, [@null, @netrom, @bcast, @netrom, @netrom, @netrom, @remote, @default]}, &(0x7f0000002440)=0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=""/85, &(0x7f0000000100)=0x55) close(r0) 17:51:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000061100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:15 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0xfffc, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x4f, 0x400}, &(0x7f0000000140)=0xc) 17:51:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={r5, 0x1000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x1f, 0x30}, &(0x7f0000000100)=0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) 17:51:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000071100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="775c75a70e5057efb72349d633a21726d100eb6754484d374a2697b3d49d54a7b14481ee2ba2ae041dca7763a78b2e73c9d48590cae4a95678f3865d472a55dbfb9deb549631bebfd14d24fbd4bbb454fe00c93561f101d8a90c9c7aee5518e5116013a177147cdbe5275d945e3373fa9cefbdd9f199", @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf250d0000002400018008000800f8ffffff0600020033000000070006007272000008000b0073697000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 17:51:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000a1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000011000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:17 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000002}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000003c6b4c6008000200020000000800010000000000080002000200000008000200020000001de30200020000000808010000000000080002000200000008000100"], 0x5c}}, 0x20040040) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x11) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 17:51:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000e1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x2b, @remote, 0x4e21, 0x3, 'lblcr\x00', 0x9, 0x1, 0x67}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) tee(r0, r2, 0x3c, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x44811}, 0x20048010) [ 2974.657831][ T5092] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 2974.845625][ T5092] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 17:51:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20001d111100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x6, 0x5) r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000080)=0x73) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000300)={0x0, {{0x2, 0x4c20, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0xffffffe9) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket(0x2, 0x6, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r9 = socket(0x11, 0x800000003, 0x0) close(r9) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r11, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r11, 0xfff}, &(0x7f0000000500)=0x8) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r7, 0x0, r12, 0x0, 0x4ffe0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0800}, 0x2000c858) sendto$ax25(r6, &(0x7f00000002c0)="fec4f8de6255edc7f93e2821deff6ce3040faeaaf7e32d276ded68adc3970570e13ff440d023769b0b08014e", 0x2c, 0x20004014, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 17:51:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80000000003f000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:19 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80400) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local, 0x4}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40a88808}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x31e, 0x3}}]}, 0x4c}}, 0x1) 17:51:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000011000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 2975.989538][ T5121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2976.013612][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2976.030482][ T5122] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 17:51:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000111d1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) r9 = getuid() sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@ipv6_getroute={0x4c, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x6, 0x0, 0x3, 0xc8, 0x3, 0x700}, [@RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @nested={0x4, 0x5a, 0x0, 0x1, [@generic]}}, @RTA_MARK={0x8, 0x10, 0x7}, @RTA_UID={0x8, 0x19, r9}]}, 0x4c}}, 0x20000840) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "793b6c2466acce5b", "3764e9d030f0ba0c38501f2f5b477a89", "87a161b2", "e2c224503aa4654f"}, 0x28) 17:51:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000001f1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000111d1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2977.049257][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:51:21 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4, @local}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x5, 0xa, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000040)=0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r5, 0x74, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @empty, 0x6}, @in6={0xa, 0x4e22, 0x50, @mcast2, 0x9}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x4e5c, @ipv4={[], [], @remote}, 0x1f}]}, &(0x7f0000000180)=0x10) 17:51:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000201100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000082000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200081001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$inet(r1, &(0x7f0000001480)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="c6d4bc006672d59fea46fa5e9d8e13a71ac382f382cadf81712d263b13e722d0d62e503ee4f9ff249f24a283c33809a772dcfd80e74ebd8633b9e8ee7245e8db463090d7e373b22f07d20aaa8e4e553108b720c773a11c7fa4a7d5765d1c839ab15beeec306b9837f3236940f06cfd31a8d28b3e800583a2", 0x78}, {&(0x7f0000000280)="515c7e9d9e64a624f2fc1eacfabe40c9e9177f04c295967390290671560fe3aff8076013ff1263cc10b088544966590acdf353964c0f5bdf81ba5ebdf5784a07052171b92138ac10c236dc568dde87a7e3418be9ab03d337f83435e93838feacfb577055ae03ee32d4ba5c6725c5b9dc0afca78c4f03fe0e7bf17da2", 0x7c}, {&(0x7f0000000200)="c33b13418af34656c193693c", 0xc}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="125978d3c85607127e11707946c3d4ecb76a5b4f5258a7f3fc72683619a6bff6dbf7a75b36bfe92e162d966c2314f79064145cb04138482831bfb7a3af694506a44bb08021af8b1fa82d82de2e6b3ef52ef072978375531bfc063d4a66d8a78daa79139f56b005f3af9427a35e15c9b2204a6836653460080fc501a835cc9b18c0a6fcecf98a425c5f8c11f0da659ba243929346b2be4b4355a7", 0x9a}], 0x5, &(0x7f0000001440)=[@ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x3, [{0x0, 0x5, "2ef6dc"}, {0x5, 0x7, "61cb8d8868"}, {0x1, 0x3, "cb"}]}, @end, @timestamp={0x44, 0x10, 0x10, 0x0, 0x1, [0x40142e58, 0x0, 0xffffffff]}]}}}], 0x38}, 0x40000) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 17:51:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200074001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000782e1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "6c22fbc6456e2a0d", "608bad2cc02ab90d14666964f2ab9895ee7d2e8f23cded1b3061ac7fc2df00", "a99a533a", "7997fbda5d406b4c"}, 0x38) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200060001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = socket(0x2, 0x6, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r4 = socket(0x11, 0x800000003, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001900)={r6, 0x1c, &(0x7f00000018c0)=[@in6={0xa, 0x4e21, 0xfffffffa, @mcast2, 0xfffffbff}]}, &(0x7f0000001940)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001980)={r7, 0x400, 0x5}, 0x8) accept4(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r9, 0x10e, 0x6, &(0x7f0000000080)={0x8, 0x1, 0x7, 0x4}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000380)="b44b6db51d5e4154f42c16703eb7ecce", 0x10) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r1, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x0, 0x9, 0x7, 0x2, 0x3e, 0xf0, 0x72, 0x40, 0x42, 0x1, 0x40, 0x38, 0x1, 0x1, 0x8, 0x7}, [{0x70000000, 0x6, 0x5, 0x6, 0x7f, 0x6, 0x1, 0xb71}, {0x3, 0x2fa, 0x7, 0x80000001, 0x6, 0x100000000, 0xfff, 0x7}], "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", [[], [], [], [], [], [], [], []]}, 0x18b0) socket(0x29, 0x80000, 0x6) 17:51:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000003f1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000ffffff8d000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000401100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xff, 0xfff9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0xe000000000000, 0x200, 0x7fffffff, 0x800, 0xd235, 0x1, 0x9, 0x1, 0x0, 0x4, 0x6, 0x1f, 0x2, 0xf30]}, &(0x7f0000000180)=0x100) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2980.189623][ C1] hrtimer: interrupt took 267981 ns 17:51:24 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000001300)=""/179, 0xb3}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000001480)=""/223, 0xdf}, {&(0x7f0000001580)=""/215, 0xd7}], 0x7}, 0x10020) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780)='nl80211\x00') r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000017c0)={'batadv_slave_1\x00', r5}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001fc0)={'team0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000002040)={'batadv_slave_1\x00', 0x0}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket(0x11, 0x800000003, 0x0) bind(r14, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r14, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000000)={@dev, r15}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wg2\x00', r15}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000002100)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x34, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r17 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r17, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000481100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000fffffff5000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000004c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200065581100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@local, @in=@multicast1, 0x4e21, 0x7ff, 0x4e24, 0x0, 0x2, 0x80, 0x120, 0x1d, 0x0, r1}, {0x7, 0x3, 0xf39, 0x2, 0x9, 0x100000001, 0x2}, {0x8, 0x8000, 0x4, 0x4}, 0x3, 0x6e6bb1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@rand_addr="d27b1a1a7d7afbfbe8685dffe9bb806e", 0x4d2, 0x33}, 0xa, @in6=@remote, 0x0, 0x1, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffff7}}, 0xe8) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c80)=0x14) r4 = getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r4, @ANYRES32], 0x1c}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001cc0)={{{@in6=@loopback, @in=@multicast1, 0x4e23, 0x9, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x29, r3, r4}, {0x3, 0x0, 0x1, 0x7ff, 0x5, 0x0, 0x8, 0x8000}, {0x5, 0x1, 0x3, 0x9}, 0x2, 0x6e6bba, 0x0, 0x1, 0x2}, {{@in=@multicast2, 0x4d2, 0x6c}, 0x2, @in6=@empty, 0x3504, 0x3, 0x3, 0x6, 0x0, 0xd6f5, 0x6}}, 0xe8) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r0, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000300)=[@iv={0x88, 0x117, 0x2, 0x74, "4ef8c5ca3f1db877cb388f96fc11d985c2adeb06c67a54dc6b66805e02456c072e887be874a6c477902ac7dda8d0125934af3353dafe90bfdfe577365cc76805267a1980634d4e717d0a828d67fe815caea12222f741004004271d149bdbcba409932a9925a8fc803ff6e8f7d035e0af411bb51b"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @iv={0x18}], 0x1100, 0x4000881}, {0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001400)="efb4003443c462ba7ee01f7700d93935825aa4e901bd771e44475fbf0660396a1f6670ee8ce4091cf00ec0c40de9709c1e9ac763671a1bcd485dd98eccdb614875b8434c67a687a7170356af51ca100807ba87f1734f79c6625f06540b3c7dc88ca2097c2b3303bf3e1a", 0x6a}, {&(0x7f0000001480)="b6cd225820791e5ed048cc17a2cdc17f97510b4469d9b4d785989ed4e80f07d749a7440aa61ded177e3fcc568e609b98747c62b4645b709adb05230fb2edb7800395def17402c0efb9820f61a6d1b1f70c20308a58e46c0b766a898c89efbe466ae7eabc91", 0x65}, {&(0x7f0000000180)="bb30c80d189aeaf077ea16c0015266f5a46881ee05ef890a15c47c6f9b0cf901d3bfd22d9a4c21e9355a8f8e", 0x2c}], 0x3, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001540)="934d9adc0ac242ac5e40e0599b68f1d039bdee1e5c94a922504a9841e904868f65a65b98f3f1c2cf8327e13b5a966637fe5c66c5e81df28788e436", 0x3b}, {&(0x7f0000001580)="a0747f06e912d12f5d66483ff2", 0xd}, {&(0x7f00000015c0)="ba02ec4703582cc2ee3d2ff7a5ca2b9734ebd048e084e0b7db0f5019e80b12be3fdc58ff0a67582199bd2bd9ba7ef61378c16700a17bc62d22f7a3903098b728e5bcdfcddda1269329d46f98fab879860c5877718446921ec422b63952b2e793a79a1a1f74e6bc0fd8427e91a660fec495cc36e724d64b4a558f67c93980c1ec6911cda55fd4acfbdc8239d8ba66d8772cbda6f602a7480013ed71b11a7101a9e2fe1257b55f62857ab3e4547bf8455b7257de5b66f6f0c39e6e75f7975c5abd9e5c51ace19ab2bcbe9b3fc8610e7f818e73", 0xd2}, {&(0x7f00000016c0)="1354b4ea5b48e2d07856e3d090418aeb90fbade5faff208478479c3e953679ea9b9cb4", 0x23}, {&(0x7f0000001700)="eb9ce563bcdc8b74e9f69e13067221c803bed3d5e7d3943c22ca5efc16c4acb54e3ced2aeb9d95243b6746f5cf43bf186d0af6cbd7cb294cf41ea42fbc88b3d9f921185785df5322af", 0x49}, {&(0x7f0000001780)="1295c97e4ba834ef667ab0cce8d597291707794e35fa5abfce9249d63ffd274f0e4af72576786d9fd6f95e673c789560db6da88b4ba9492ebf432c1e422b8dafff22db27069e218fc8c4b2b912af06f299125ac2052e49c67410a03a08aa6603b89aeef395c1cd5fb82ae593f048296123743336f4b522c9f6537f780fe6bedb5dce14d8ff84204b180409443c6973531ce879cc07d679a96971065dd3362466baaa8ec3cad0d568dfeee555befa879cf5aeb8b9d24d1ec4688573f0c608c4", 0xbf}], 0x6, &(0x7f00000018c0), 0x0, 0x102}], 0x3, 0x80) 17:51:26 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000601100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x6, 'syz0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000fffffffe000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200058651100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80feffffff00000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000681100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80f5ffffff00000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80007fffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2000, 0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x30000002}) 17:51:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200300001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x2c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000741100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x0, {{0x2, 0x6, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 17:51:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20002e781100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000300000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80008dffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80007fffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007a1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000017c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000100000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80007fffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000811100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000017c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000f5ffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000f01100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe80007fffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xffffa888, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000008000138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000040000138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xf9fe11e8, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc946eaca990a3388, 0x0) close(r0) 17:51:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000feffffff000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000f00138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000021100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x7, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000020000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000031100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xe811fef9, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000041100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000051100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000030000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000031100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000061100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3, @ANYBLOB="443c3d3c834cfa9d683826e7673405fcda4522e51baaeb8b90a6f914cd"], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000300)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)="8962f36959fe64dd6b584bc4a9a6c86ebf7cd2fea2ba7bdc197d67c8ccf3fb08d3233b4275a1bdb17dc8312f714845c6aa134ed06db564b80957c301e613aac1c71b9522fa0b0ea86fe59180521a1a06511b6569df18d98df4", 0x59}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4d}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x90}}, {{&(0x7f0000000600)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="8e16dfadbd8dece614c64defb8483d0759a89b2cb9658d562917f0cc315fa644a8f886f5b6db0ee2f37ba8df8591053cdcc7a082f6f69a3358e1e053c10fb2f455789b3a2c7642d82c8e7235eb7f1dfc87f37844fcb862ac94955d7706d058535a261681b10d1357b19c3096c79d87a9307d42f5b31efa4f8c193ed7faee6ed0c642072dc1bd9ed5e0000668f8ea93ec2c5846427793dde99afa3f3f9a0f069cfa05276831ac2480323ab5256662745f5e8e058a16045483ca60f28afa72c9b185e64f9abfc71f1870d3244ffdde24", 0xcf}, {&(0x7f0000000780)="7fcfb07d9e949ba74dfab869c37dc60286a4f5dd5c7562a025fcf8f20eebeda9e7b129968eeb7e8424a58ea3b0bdb9817eee24fbc0dc82fb6a952866fa6d7db95bca5cd5cbce3ab8fde47932cf2130935e7b9e063a94edf82b010c43111d4f060e", 0x61}, {&(0x7f0000000800)="3130f352d46c380b0613656010d60896e83a9a49bddfb60d7fcb3f4bed660e7eb539044d80f462bf7ca3dcc7afec215ffdf18b3b7b8a001f93294877e83a2ab6e4d629397ad19eaef6eb791f7a507717a349fc168ff58a70c3fb079b1855fc58a8e2cb9a2829f3b6c4037ce9e471af52082673d5ea2f86a65069503592e973763aeef770b39dd9f0ce324fc1e88fed0a6dad812f3e5de2463672584d550e1691c6c2d3ecb03ecc65a6f0972c6a53f3ecc013355858cbc2ea9935c50cc931b744aec92ac6592e53bcf3f4ff986bafccbeb988f78c2c948a202302d8d487d0098964a0f45c885f88bcca906780871c", 0xee}], 0x3, &(0x7f0000000940)=[@mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0xca}}], 0x30}}, {{&(0x7f0000000980)=@rc={0x1f, @fixed={[], 0x10}, 0x7d}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000a00)="1b13501fc3cc9b173525d817689d6146dd0de21ef8abf3fa65", 0x19}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="268a288ce5d23fb695884963428f7ff243fc85ccbb2dfc174d8d2cced006f9006511624598159e1523f86f3f394bd5beb008e0e3f03a4c9b536467e4b16f3ef28162f84ef08f059761b8ad3df4f40f3c510197de864c7a2297960ef302d28a812d84776074d91f822e186ae028a5ee97625ad375ba89584556d9ff1a9a8ea188d44256fd252448e18fde16465183c3d3435b0f5f95d2c8bcec043282356f73ac190407235367f0fb48337634cbcc924ba2e7825f4e8a21420db8193a9a15392ce120f6a129efb7eb7c7fcef17064bbfd99c1150ed5df", 0xd6}, {&(0x7f0000001b40)="24769ef6c392519ab4b540c7a450ca9ae62b0b63bd52cf9773ecc25906c5c9f11e08dd62dfd3b981d521d611976aa31c", 0x30}, {&(0x7f0000001b80)="b8ec1c359f5a0fa2aaf875fa62d152644f8bfb825f6301c64ce2cfb5f49ad2bb362d3ace8996f0ca7cbacf372b7a887aff5e47417d7423292d1b63db1dc536bb50c0dfa9e4baba68dd669a914aeaee770c925f4f5e65b14d9ce12d3395a5857d2e0af074b55df5d830f5af9e70c00731ddf582f1b3d903b96e88fd679bcefe67e4d0ed1c5c5181697007d22060ff47a8ed589b389675e94e22af02375bdd0dc1307d0cdda5623227e40bb701183a7ea0c45cab7c0251518ed4472a4ecb1448d94437b589b005eee02872dee8a6b1e719a40c4f3b4c74b75e342a5eb6a5d0c93d12e2661e23b69907aed263ff4e29990de61804142e336daf90f107c42022fb948f296b5a61c9291a6e9729700cdf9c786a449b0aa69820776f72e7e6bb80cae7097a98615e005f1a0150427165dc827a7f881206c46a3519e6b1234a04d348107e9a0e73d0ae92eb8410ad188711cc91a3ea9705340d479f3a1c1d2f1a944e31078c84a24ce3326d7b99f97bc1c1745584270a568617a38dedce0ad397df00417db3b432fa93bcf3f3bb2351cb03b3afd723c36e7f55a072f8759e33d80e3d3b9cfd94ed392d546f9a9dd299cd6ad10f93bbfe3a611dc3a700048de519831ba645b2f40ed6d5c70c182c8d8028cb2fe267e5c08acb0603140470536ec6bdf7389d68df92965bd34c30fde74abbd753ffac868e80232bd9ed6e9fceac33c55d65d97864a6fcb093bb3ab134157c395c96aac9564d7b586a530a2583a5f0dbd00cdc254235cbbca7f657ab1f170a321fc1aa9bcb3215144127be521bdd5891e8e637d157a979b02d8f1fac7b14680cb0aaef51549048f185a383eeb4c903ad3a857ec01f376044b0f297af167f006df89ebd020fe3064da97e4f4a4fed16937dab83bef694ed76e22048bc06354e1f5a00a0c4f431a61dbce90e5796411701be0370b7cca82939bd7dd89207e91ec78549cefc4df353ea7bf151c8d1673f52e7ff198430b39856f5f39cb0a2fea620b5f99cc8a4a7e7d98f36941693284f263214b355021ddb4d6f731bd790b36e0e65e59139a075087fa9f5fc32344228c898847db86334e25552bef825a0e6e6b16522c185f467f84d3f67026400002ac412a1ce5f5206536a3893c5e90e2a57d7f475182b618ea9821adb20b562c4e8d46f32a311baefe8af1beffa22516907f19ecefe3ce685dce660bd8027709b3764a140d45bacb659720cf33bac5fc0a9a025a4ca19cac6d080bb1f647f96d200ca54011855636de36668abcf92bcb4ca980efc3395c5bbff2290c9d26b070b08962fd89aae37c5e0390941fabc6f1e53e49361ee08bd01b670d9f799f5c1227e6df88cd5529f99d68558f68a4a439229b4a76b2724dab6cb3be3e3c2a68439dea66232ad50fa9e3aa4cd82f1b8675f2b02d6093776c381727cbf68e9ba0a69c2ab4a02e22526daa35def4393cfcc01acf9d82b3f7cf3c451a5fd53c2860bb96a0158aad5b593cb3cc059579490e528cb59a77a868ee91e0d567e3d041857d4e74f1091def8bef8ea7ccf4bd807ff1d9c3cd41bb83291dd1ac29d898ec8ce842f6557784663e2e2366fa19a6fb53decd593fa4b092aa8270ec4c51719be524f9b79ac01c90c4e9582777613cb8397a104208cff9de4877982248e26feea701545b27e45ce8a3e3e6b2db1b0754d807018b9411f29ef3f80b765dc8d2fae8673cb8d6911220e3f1d45666371a6b075c28f760bb68fe535a6e78003a841da385925a65f2b2a1eb9c72dae5c2ca0c9dcd25938a602f7a181a1bcf78edcd987f97f61ea0647c0041fecbb2ffa98fbf1a4293047f518ff2f1979c51e4e400c64370c5394f9f2b06f308b1a479999046484b1da1ffbf472795c7ba4cbf6ee6e28b8344ffd6d5acf89abc56c7dca9a1494ccc6e34d35a1ca7e6ec6789372cc7d0c4a28e534c151d41b6674336d8095af2eafb436958718fd3bcadb3075d6a4fe6fb568b1e834c9aa5c31fb9247578a0027e9aa2690efc42d2b9bf7189d5297c82d48807674522f1057d470299d1389484f547807e4817d81b50f1a24ccea32d8e6e9b7d4b9f9167bd5a598f2c45917398f6e2f13f131342aecd40f9e0185c7f13d83768de478240cf352190d4f2cd33afe8e02f233a392c0efd9b9eabd772e98a7d4e568891041b12f6761dbc638889849a64d63f44bf44f7d05d55d9426938ebd14229729d4ca6a9fc9efff1d14d98b4ff660c0fbff21168a26fbc7fe2b5c40889e62583c52a8446d17971f724ee7a6d687e4372607a4d1930a1e422be6b4551ffe8e712d5017c7f159112367d7059c4a0ef621bd6000cec7e0b81a30c0431bbae71ab68e3f5cce9106079b8acd6b34e49880c15863bb57947b3f5210855ba258fcd0f93722cdbdeb238574e8e82b9fc84ae4bd4a8f0b61a234ee32c627a25116d483dd5e5cc8e064984589c6665ae715d3bf4bcf04034123fdb45cb7db73d68bde0aa9bff3fb41798257871514504a88de889719e31608946cd53d9b752abdab13d4b57179711cfe2d45e69c6eec7b1817ec9ea9a83a30f0af1ec7b75368361fbc71dacd056e028f9b4b3bc006cd44047fa399a2e063b0a045b07003c556b3c3a91b061f262a3fd05253a9232acb251d5bf79bff3e4a4ac60fd38ead4e286fa055e8ce3e6dc8a9f07fc54d3cc4e1a5f9482ed666454f47e06b1e2f72a7e36ad356628a1bb01070fe52fb00b4cac4a8a06bc23ab282b2d62a0cabd391783c93ec18e87e2fb333440359e8bc1cab99f06e1edf1e2ed8ec4b2bb29b19e6b56638e9f030187e9c6327c817675bb35bd6d001cb0b1865765a03ab40c8bb606a65ca9d7e84a78098af60721f8ffbb441db9abf36059a98842026dc719bf4d9acdd7d920955fce949f46ddd0495725124be7a11231ab836eefb272b195211d1ce46d265d0eca698bf2410d588a2e321cf8cf7a54fcf630c01305bd79f394cc087f70bc87a0d8812c6ec5602b952ff9cd6005442c59b4fa9b1e719198a3d112051c273f902c380ab40ef7ab128ea99c735e67115edb8dd1a32bd46aec5dd5a74d0529fb91cdf58aa31b0ef11d06a3b444c32336034165d8a3dc69b96f919fa2b100a4d4603c4fe8d5ac620edc22b1d22791f121ad1500e85d484c64f219b13a3d100b8eefd900d6f46a0dea53cd502f1ec51b046e012ee787f6a2b078031981cf67790b81c829958c245eb0ab2db5389cb9f49631d3fdd0b3cef43dcb271a08110e43497902f3cbc65410c4a62e584dc044ba5c877c6a08cf4ab96a2cb375c9af376d54f95007815ffcf60bf71a319782cb65ca6241cbbaa9c00470d8ae55abe94a618d6b0f98f560842aade2f264f6110d27fea5012266c28cf80c3d8f7ee75c693ac67167a0dc81bcde5475e70d97f0dcddb8be6a16d29e671df2ad0efa2ec2f6c062e87c885e388354ce1fa009e604214561e5db582380ee15034c1406d019a00f6dc7c3b3684b47c97edeaa33d25f73628a83e9ec33cd7a48d30c151d96b4ae9bf67039f8e7c4e7d7446156fd7d88477fa011dd3f653bf8e814ac36c48aad4562506a86a2e9e89f0697d0381e662e19e18fc7a56341b0b9870f8b5856dccc55e8c624b9c6f913e81f39dc46e8e4b1a00525277af5e15a9b16dbee57bcb39423d3496f88f443cef1b73ad0927ebb771c478a15aad66ef6f037ba0882d0383def654da2acb9d5359fd73679d86999b9a2f664edb4a9113762f1e1b7a23fffb3e8d65883f4dfb6f6095ac84594a49133441a5cf82cfb1fbc343f9ff9a7042a8c6e032ac778c392d4df64768ccb3117279271256fdebd48613e30deb1b46c026574dddd12be6c7492465e40a87c1dd4402ee42bb78cbe5e76bce95212bfbc48ee76a2f2a6cbf4a042c5156b51b5b180f52bcffad20e0b9c139942c3a236fe3a82a233116e1757e2803ae9f51b4ffb094dd08b6591d06f56b6524876297fdacf66d2ee51cc079e48ee22c853224d2a7e7ebd8795db35a22441504d01438d8115f4bd3ef50e2841ea5b68856a994e86cb78af38314a9e608c4a71b23f4dfa244e22f017d9423f30528345b0d2d7cdbb7cf22285a721a08d6d9439cd925d83d07a97fcec7f77e1807f75582798100fe000447e455dc4fdfd9f01bf73878bcb5e53d8909903ad0fbe4b0cb24026ba2b3e86f5f238657c83237d62e9504d14d2672a51892fdc24f8c41ddc8bec13c116aa8d0f8d7372de35252f018a429bc027637a4d7ae565936859401b55115f492047bd25cc3f516cbdae831750c7b26a5be48487c58ea8775a6c341f78576263ac2d026bc81428fcb64ae8c0a54e3619222004a94d3e53294538ba9e7fc127106d422a42d95d723bb83b5bc336f5d4784fd3df2d0ab3f7cfc41d670c18a4ae58310b096d745d50c23d9d7dd3337d21a16dc92410daffa2c7fd78592b411982675c504258047fef7eb580f11c0a454c2b3eaa77c2eae8aa50e8a99155a363a9d94678921aad2203ea6dc2eb0a9c2415efccb3843417c7a4e6c931cc90c8ea542a0a76d560102aaeae736eb54b346c48a99a537c766b3feb123658590d3a2fca157e7c20cd57ee0d90de1a0b80ce7d93b601166e65e5e60777bdfc2b386c52982074b896be57c7dd928e7815844af50af65d5ac41b28f6f6da305073627bc7448d9b630c16f8eaee8724a2cd7250571916dfae828739a526e7593add2f1ef5e6a2270660239d78f5efe7a3bf7777d1e3d6dca630a0e5cbf43e30587e20d892579a29c0c90afcf58605db6031005eec46e5567b8dbba085cb782a202db8bd3898619c671704ac40917337542eab63b732f2322bc71536663be70cfe6f23d46d778955bd19354a70c3dff30ceaf192b4b7276a6c7d5f5992303c3c581e438006cd5466983c236c59123357557c4e4308384e4e48a9d587e96cedded5f20afc174406650755aefc02518bafa3ec92dacc8d5df5e9141db9c755ef214d8f53b8568d93a6016adcab43baf5654d0ddaabe3ee638ed88127575b74ed40d984d7c461bf2624e440c6539e6389fdadb36cc2c8dc26e4b5c49536d51fe74b327f595e74182fc15cbe100abc836c0c784c6771aab60e159143eb19031c5e3937bf1488d72b141e89cbfcd04738b1ecc37fdee89afca37eae588e99a56ce0620f8fa967b14ff30268d755cfc97281b302e0c2f6f341ba91a11064430f79e6bbe1f2ae7c8ac7a0446c6e9072b8a1e42268b1a629a8e5b75d34ea23f9423087fd6a18f3a6311cf83263d9e1bcaa647dd9aa2b51b0a1a82b1d9ab917230f110faba070bd57c56f94ae8090be556768226edff20c50483282b0ecda309796534a3530f99ff674a5c3c69803c14fcda1c3b20c482b87ce465a572a457294502a743731ddc6c4f00de8ea643891420609f84c0614c9441d1b4989915aabf63ea099d256bafd8c8cee5aa315831c734475edf146b33dd6e23a29462fc2a3f60234316837a0a8ca09db3ab6ac5fabb2e6959ad65ebbfa0993cd786ee2a4f4f3d71169125025eba63d2898068ac55179882c81833f81dff070d82f9184e010faf6b0dbbc90320fb8eda568b0f1c4addd38ef618a7b597a8050619446750d546c76f6d24ca0999a3871330f88263fd7298f481be82e7a67dffd166373c01f7a6778228e9df762e88a49134492349f6557c4825863da4be4749ac7a1c075a5d714915e7520ddf3c669c7c1984fca1224a15b76564710328c44bdac003033e75d537ff9ee1bd04fd8225512acf2935da1dba69371d9b37020df0d4e4c218439c08abee3e8ce3e0110d08", 0x1000}], 0x5, &(0x7f0000002c00)=[@txtime={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="5ba09dad433c7333ce3d933972b80aa6b846485e03aa10c7de7a107a97e66025c9ca87d6a0347d3a70727c3e6745b26806bc8c9f25cbfa8f88367511f16d5ccf8b482541d5ddb100c26896f67c3f298d05418a0a98c5f94eadd8e52cd540907a3ba7eebbb0a04dcdda0e9872899498fe241ab74702e1271ddaba528d395cc7f72352514b1bdd0a4c98c866fba1b67d7d2292fe018cc4b25ef4", 0x99}, {&(0x7f0000002d00)="5918eba59dbcc03a4e5a298d264c1ab4e3a5678c87f4c3b1c0e3f06188fb68570dde2741d7f5f8f2ecd29fe1b76e1d373c06013d8cd51b5ee740a15a407c7edc39847220089da803047bbaa80b0fcb64f225a70d7f63e91fcdcb2328f27e2e152b8c04a6159031ad45d3b1fd7ed0191ff81376ee01a6fdda17c378872fa85ace5a373ac2229caceed0a702390de02253edb5c3cc74c9a8157ce4be925a", 0x9d}], 0x2}}, {{&(0x7f0000002e00)=@pppoe={0x18, 0x0, {0x2, @remote, 'ip6gretap0\x00'}}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x415}}], 0x30}}], 0x5, 0x4080010) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x2, 0x6, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000080)=0x8, &(0x7f0000000240)=0x4) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 17:51:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 2994.823534][ T5723] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:51:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000071100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:38 executing program 1: r0 = socket(0x1d, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/140, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r4, r6, &(0x7f0000000180)=0x3, 0x3659) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "27534ceaa1fdebf3", "1118364bc3ebc744164d295c20b10380769f6600", "f719df69", "3cbddf02ee9e4b6c"}, 0x38) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x0, 0x6, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f00000001c0)) read$alg(0xffffffffffffffff, 0x0, 0xfffffffffffffd23) [ 2995.028974][ T5742] can: request_module (can-proto-0) failed. [ 2995.044323][ T5729] bond1: (slave veth57): Enslaving as a backup interface with a down link [ 2995.069906][ T27] audit: type=1804 audit(1581616299.072:318): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2317/memory.events" dev="sda1" ino=17031 res=1 [ 2995.099732][ T27] audit: type=1800 audit(1581616299.072:319): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17031 res=0 [ 2995.122522][ T27] audit: type=1804 audit(1581616299.072:320): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2317/memory.events" dev="sda1" ino=17031 res=1 [ 2995.259905][ T5742] can: request_module (can-proto-0) failed. [ 2995.271455][ T27] audit: type=1804 audit(1581616299.272:321): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2317/memory.events" dev="sda1" ino=17031 res=1 [ 2995.341743][ T27] audit: type=1800 audit(1581616299.272:322): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17031 res=0 17:51:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000016c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x50, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x5, @loopback, 0x10001}, {0xa, 0x4e23, 0x100, @empty, 0x7}, 0x3f, [0x5, 0x3, 0x7956496, 0x6, 0x7fff, 0x1ff, 0x101, 0x8000]}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4}}]}, 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x4}}]}, 0x40}}, 0x0) [ 2995.695353][ T5737] bond1 (unregistering): (slave veth57): Releasing backup interface [ 2995.804212][ T5737] bond1 (unregistering): Released all slaves 17:51:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000081100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2995.885576][ T5723] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2995.946365][ T5729] bond1: (slave veth59): Enslaving as a backup interface with a down link 17:51:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000050000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:40 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="354800002a000505d25a80758c63940d0124fc60100003400a000000053582c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17:51:40 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4c0000001100fff1fefefd956f76c9b724a6008000000000000000683540", 0x1e}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a2909302", 0x11}], 0x1}, 0x0) socket(0x10, 0x400000803, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') 17:51:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000a1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2996.425196][ T5784] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 2996.446444][ T5784] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 2996.454861][ T5784] netlink: 16645 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2996.599344][ T5786] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'. 17:51:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000e1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x9c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:51:41 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000070000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:41 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x6611, 0x0) ioctl$PPPIOCGUNIT(r5, 0x80047456, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) recvfrom$l2tp(0xffffffffffffffff, &(0x7f00000029c0)=""/4096, 0x1000, 0x0, &(0x7f00000039c0)={0x2, 0x0, @multicast2}, 0x10) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80, 0x80800) socketpair(0x25, 0x1, 0x3f, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x8000, @ipv4={[], [], @empty}, 0x2d}}, 0x4, 0x8, 0x4, 0x1, 0xe, 0x9, 0x8}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000180)={r7, 0x9}, &(0x7f0000000200)=0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet6(0xa, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240), 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000340)) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0x0) socket(0x2b, 0x3, 0x0) 17:51:42 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/248, &(0x7f00000002c0)=0xf8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x9, 0x3}, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000000, 0x100000002}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="652d50eacd03320f09639d500208c3f0dfa2848c9a9318", @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000003c6b4c6008000200020000000800010000000000080002000200000008000200020000001de30200020000000808010000000000080002000200000008000100"], 0x5c}}, 0x20040040) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000300)=""/41) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) 17:51:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x8, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2000000000000138, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/161, 0x35, 0xa1, 0x8}, 0x20) 17:51:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000101100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 2998.467928][ T5850] BPF:[1] Invalid name_offset:8 [ 2998.481620][ T5850] BPF:[1] Invalid name_offset:8 17:51:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1000000000000000298000ea1900"/24], 0x18}}], 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) 17:51:42 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x2343a726) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="ab553fec94248c32e27d53d9ab7a6bc7bea4b360cdfa24e7b18a6fdc6d", 0x1d) r7 = accept$alg(r2, 0x0, 0x0) r8 = socket(0x2, 0x6, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xffffffffffffff23, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110, 0x804}, 0x850) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r10, r9, 0x0, 0xffffffff800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) close(r13) splice(r12, 0x0, r13, 0x0, 0x4ffe0, 0x0) r14 = openat$cgroup_ro(r12, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r14, 0x4004743b, &(0x7f0000000140)=0x6) sendfile(r10, r9, &(0x7f0000000040), 0x100002c00) accept$alg(r9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r7, 0x0, r1, 0x0, 0x1000, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r16 = socket$inet_udp(0x2, 0x2, 0x0) close(r16) splice(r15, 0x0, r16, 0x0, 0x4ffe0, 0x0) getsockopt$sock_buf(r16, 0x1, 0x3b, &(0x7f0000000200)=""/108, &(0x7f0000000300)=0x6c) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f0000000340)=0x3ff, 0x4) 17:51:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:42 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/248, &(0x7f00000002c0)=0xf8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x9, 0x3}, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000000, 0x100000002}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="652d50eacd03320f09639d500208c3f0dfa2848c9a9318", @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000003c6b4c6008000200020000000800010000000000080002000200000008000200020000001de30200020000000808010000000000080002000200000008000100"], 0x5c}}, 0x20040040) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000300)=""/41) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) 17:51:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000481100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000080000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x29, 0x80000, 0x5d) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000480)=ANY=[@ANYBLOB="080000000000000000000000000000005eaef800a7f5c2a46fa6905c84507c573d9800d6ef30edf359bc8b7c5f8bc523462fd95e845ee7de6d380fdceefd05d053"]) socket$netlink(0x10, 0x3, 0x13) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000240)='./file0\x00'}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r4, r6, 0xd, 0x3}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x400}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9f}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_PROTO={0x5}]}}}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv_slave_0\x00'}]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 17:51:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000004c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:43 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/248, &(0x7f00000002c0)=0xf8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x9, 0x3}, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000000, 0x100000002}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="652d50eacd03320f09639d500208c3f0dfa2848c9a9318", @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000003c6b4c6008000200020000000800010000000000080002000200000008000200020000001de30200020000000808010000000000080002000200000008000100"], 0x5c}}, 0x20040040) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000300)=""/41) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) 17:51:44 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = accept(r0, 0x0, &(0x7f00000003c0)=0xfffffffffffffee6) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000340)={@dev, @broadcast, @dev}, &(0x7f0000000380)=0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="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", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="216addf08e32b751b6e26a08fbb6473509f7bb367468f9120a4796c5a61169f3b3356ddbd2f46b0db5f6ec3544278ec903ff1589c646722aca51a7e2bb6f968ba4ca25d3786f96d1dc6675156c786b99cd2912a00369e126e4937f86836dccb544d978c595560c6ebe36b39193a17138c1bf619060338f72aa4208267b13ed025821a6c50043c45dd116e36c12d3675c5e91e4d71d3fd4d4d49afea8652077fae25fd3964b9e4da427733706e27b0ed327f73837bcfb1e8de35ed85f9508f0c6a957f0e8e511aac6ac14bbb9db6ac39015453538a2dcfe74977e5fe5f922eb34548f3d3bd125a02caaf23b0815239bd3", 0xf0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_user\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="da6f0563a12bcc9118", 0x9, 0x24008000, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab229af40100e08de6d17348b46d1de5497bfd0ef4e88a2064796288fc7000019ea0d4ed676657ada69336b46be7e40dbba1a0899cb5083c94e024f42edb0a50a3359ad1d30e04f41669d9b8cc8a88d397340e9ad966a46a9203cfab8bb8ac1b72daafe04569b4b813e8783ad192bac18ac79a6103e9a8a68ab50435aa710220746dabe00c4183f2a67951df9703d4e4da7e2a61444151a38069febf0ff42138137d91e0fb54904014ad9271ece37ab0dfaa50d7f25d5306398d0e9113d9b58c72ee21984afa7f"], 0xc9) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000280)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg(r7, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 17:51:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000601100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:45 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=""/248, &(0x7f00000002c0)=0xf8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x9, 0x3}, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f00000003c0)) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x2000000000000000, 0x100000002}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300)='NLBL_CALIPSO\x00') r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'wg0\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="652d50eacd03320f09639d500208c3f0dfa2848c9a9318", @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf250100000008000100030000003c6b4c6008000200020000000800010000000000080002000200000008000200020000001de30200020000000808010000000000080002000200000008000100"], 0x5c}}, 0x20040040) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000002) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000300)=""/41) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xece40000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) 17:51:45 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = accept(r0, 0x0, &(0x7f00000003c0)=0xfffffffffffffee6) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000340)={@dev, @broadcast, @dev}, &(0x7f0000000380)=0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="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", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="216addf08e32b751b6e26a08fbb6473509f7bb367468f9120a4796c5a61169f3b3356ddbd2f46b0db5f6ec3544278ec903ff1589c646722aca51a7e2bb6f968ba4ca25d3786f96d1dc6675156c786b99cd2912a00369e126e4937f86836dccb544d978c595560c6ebe36b39193a17138c1bf619060338f72aa4208267b13ed025821a6c50043c45dd116e36c12d3675c5e91e4d71d3fd4d4d49afea8652077fae25fd3964b9e4da427733706e27b0ed327f73837bcfb1e8de35ed85f9508f0c6a957f0e8e511aac6ac14bbb9db6ac39015453538a2dcfe74977e5fe5f922eb34548f3d3bd125a02caaf23b0815239bd3", 0xf0}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_user\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000001c0)="da6f0563a12bcc9118", 0x9, 0x24008000, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000a40)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab229af40100e08de6d17348b46d1de5497bfd0ef4e88a2064796288fc7000019ea0d4ed676657ada69336b46be7e40dbba1a0899cb5083c94e024f42edb0a50a3359ad1d30e04f41669d9b8cc8a88d397340e9ad966a46a9203cfab8bb8ac1b72daafe04569b4b813e8783ad192bac18ac79a6103e9a8a68ab50435aa710220746dabe00c4183f2a67951df9703d4e4da7e2a61444151a38069febf0ff42138137d91e0fb54904014ad9271ece37ab0dfaa50d7f25d5306398d0e9113d9b58c72ee21984afa7f"], 0xc9) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfffffcbe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000280)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) recvmmsg(r7, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 17:51:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000000c0000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000681100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000601100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000080000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:46 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040), 0x4) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/181, 0xb5}], 0x1, 0x7) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000100)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x10076) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'memory.events\x00'}, {}, {0x20, '+trustedkeyring@cpuset\x04'}, {0x20, '.]-ppp0*wlan0}*)bdev'}, {0x20, 'posix_acl_access'}], 0xa, "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"}, 0x1055) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0xc, r5, 0x2}) [ 3002.645805][ T27] audit: type=1804 audit(1581616306.642:323): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2325/memory.events" dev="sda1" ino=16801 res=1 [ 3002.645841][ T27] audit: type=1800 audit(1581616306.642:324): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16801 res=0 [ 3002.706127][ T27] audit: type=1804 audit(1581616306.702:325): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2325/memory.events" dev="sda1" ino=16801 res=1 17:51:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x100, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="130000004300250069000007a2e407edab1d05", 0x13}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r4 = socket(0x11, 0x800000003, 0x0) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r6, 0x10001}, &(0x7f00000001c0)=0x8) r7 = socket(0x11, 0x800000003, 0x0) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r9, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="08890800000c01fc00000000fff2000000000000"], &(0x7f0000000100)=0x18) 17:51:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000006c1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:47 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getuid() bind$alg(0xffffffffffffffff, &(0x7f00003f1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00006a9fef)="e5fcb5", 0x3) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=""/176, 0xb0}, 0xc0000100) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ppoll(&(0x7f0000000500)=[{r6, 0x2103, 0x64}], 0x1, &(0x7f0000000580)={0x0, r2+10000000}, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x3) 17:51:47 executing program 1: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f00000015c0)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x800) write$cgroup_int(r3, &(0x7f0000000200), 0xfdef) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x8001, 0xf4d3}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x22, 0xa, 0xff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000340)=0x73e2, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@loopback, @in6=@loopback}}, {{}, 0x0, @in=@remote}}, 0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000003c0)={0x3, @bcast}) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in=@local, 0x4e21, 0x7, 0x0, 0xfffa, 0x0, 0x80, 0x20}, {0x0, 0x40}, {0x0, 0x0, 0x40, 0x4000000000000000}, 0x6, 0x6e6bb6}, {{@in6=@empty}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3, 0x3, 0x81, 0xfffffffe}}, 0xe8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 17:51:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000741100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000110000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000007a1100138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3004.263859][ T27] audit: type=1800 audit(1581616308.262:326): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=16913 res=0 17:51:48 executing program 1: r0 = socket(0x2, 0x6, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000180), 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") accept$netrom(r0, &(0x7f0000000100)={{}, [@rose, @bcast, @netrom, @bcast, @bcast, @null, @netrom]}, &(0x7f0000000080)=0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0x50, 0x4, 0x3c0, 0x0, 0x1f8, 0xd0, 0xd0, 0x0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [0x0, 0xff], [], 'hsr0\x00', 'syzkaller1\x00', {}, {}, 0x570, 0x1, 0x3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x41}, @mcast1, [], [], 'dummy0\x00', 'veth0_to_bond\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @empty, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x200, @loopback, 0x400}, @in6={0xa, 0x4e21, 0x5, @remote, 0x495}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x3, @loopback, 0xf263}, @in={0x2, 0x4e20, @local}], 0x74) [ 3004.589412][ T6055] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 17:51:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3004.706992][ T6053] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 17:51:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x80000001, 0x6e2d, 0xffffffff}) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f6744117cbb527ee3697a59fb8cee23f07decfb032f4279e7b3460a0a9b0010d956d3cdd37536bedf6ba6bfeb06daa2563e96dda6d2afee33025a30b45bdb21d27367c8459262104a3ffec0687899088fd5a4a035d71"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x5a2, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1015}], 0x17, 0x0, 0x26a, 0xb601}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r0, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 3005.153551][ T6076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:51:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000004000138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:49 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000c40)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x25c, r2, 0xc08, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x26}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x467b}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400000}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7e, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10040000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x221}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xba}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40041}, 0x1) 17:51:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000820000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007300138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c65005e3697440345951d5ecf8f000000000000000000000000000000001c000000000000000021000000eb0bbf9168803d0bc24d0299af39e9b2a9af85bc77da", @ANYRES32], &(0x7f0000000100)=0x2) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000050000000000018008000a00", @ANYRES32=r6, @ANYBLOB], 0x30}}, 0x0) 17:51:50 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_team\x00', {}, 0x9}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x1) 17:51:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000f00138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe8478071") sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xb22, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x4, 0xd, 0x8}, &(0x7f0000000280)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x5}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=@raw=[@map={0x18, 0x8, 0x1, 0x0, r3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) tee(r6, r6, 0x7ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x40}}, 0x0) 17:51:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x1}}, 0x4000000) 17:51:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000007300138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000300000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="6e617400fffd00000000000000000000000000000000000000000000010000000000000005000000900300000000000070010000fc02000070b03f303ed20227491dfeb20201000000000000f8020000f802000800000000f8070000000200000500000053f38bc66ac794e3da286bb65a2eb7b6533d6916fae8a025a2e004fd28fc9e07db595caf58636b93403e748ea33cf7bff2a348b2a7bb19057e5359fdc9f0dc80939d67a4396ef742b98c7ecbc4ee06f49e9ab3198670f2524d9a0e5e877bf31d4f9a547b981d04df6c8df341b0f3264e96c6de", @ANYPTR, @ANYBLOB="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"/891], 0x3) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x414014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000002) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(0xffffffffffffffff, 0x0) r8 = accept(r7, 0x0, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x36) pipe(0x0) close(r8) recvmmsg(r6, &(0x7f0000001000), 0x3fffffffffffefe, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r9, &(0x7f0000000140), 0xff4d) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x80) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r10, 0xffffffffffffffff, 0x0, 0xffffffff800) [ 3007.343988][ T27] audit: type=1804 audit(1581616311.342:327): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2332/memory.events" dev="sda1" ino=17089 res=1 [ 3007.405282][ T27] audit: type=1800 audit(1581616311.372:328): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17089 res=0 [ 3007.451516][ T27] audit: type=1804 audit(1581616311.372:329): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2332/memory.events" dev="sda1" ino=17089 res=1 [ 3007.488263][ T27] audit: type=1804 audit(1581616311.392:330): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2332/memory.events" dev="sda1" ino=17089 res=1 [ 3007.528743][ T27] audit: type=1800 audit(1581616311.392:331): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=17089 res=0 [ 3007.570838][ T27] audit: type=1804 audit(1581616311.392:332): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2332/memory.events" dev="sda1" ino=17089 res=1 17:51:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="6e617400fffd00000000000000000000000000000000000000000000010000000000000005000000900300000000000070010000fc02000070b03f303ed20227491dfeb20201000000000000f8020000f802000800000000f8070000000200000500000053f38bc66ac794e3da286bb65a2eb7b6533d6916fae8a025a2e004fd28fc9e07db595caf58636b93403e748ea33cf7bff2a348b2a7bb19057e5359fdc9f0dc80939d67a4396ef742b98c7ecbc4ee06f49e9ab3198670f2524d9a0e5e877bf31d4f9a547b981d04df6c8df341b0f3264e96c6de", @ANYPTR, @ANYBLOB="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"/891], 0x3) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x414014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040), 0x100000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000002) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(0xffffffffffffffff, 0x0) r8 = accept(r7, 0x0, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x36) pipe(0x0) close(r8) recvmmsg(r6, &(0x7f0000001000), 0x3fffffffffffefe, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r9, &(0x7f0000000140), 0xff4d) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x80) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r10, 0xffffffffffffffff, 0x0, 0xffffffff800) 17:51:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001104008be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:52 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="8de3e4213079f8b0232ec9c68bfde3b81477f6fb09d56df82934e43ebb0c376b9440661f48d1d536b4c32df4ef657c84650d00945c771ce8e805622f9c349067e13f6daba1145bd17a87bc1b680021188b3caf5415d2d1a3872d12d94863eabbf0d72aed8e23755437a47ffd3928105918b3cbe900"/143, @ANYRES16=r1, @ANYBLOB="0100000000000000000011000000"], 0x14}}, 0x0) 17:51:52 executing program 0: socketpair(0x4, 0xa, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000000440)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000002680)={0x2, 0x4e24, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) r5 = socket(0x11, 0x800000003, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r7, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000480)={0x7, 0xcf23, 0x8, 0x0, 0xfff, 0x5, 0xda, 0x1, r7}, &(0x7f00000004c0)=0x20) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x4e) [ 3008.228961][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 3008.228977][ T27] audit: type=1804 audit(1581616312.232:336): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 [ 3008.348283][ T27] audit: type=1800 audit(1581616312.242:337): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16586 res=0 [ 3008.425643][ T27] audit: type=1804 audit(1581616312.252:338): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 [ 3008.483196][ T27] audit: type=1804 audit(1581616312.282:339): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 [ 3008.560679][ T27] audit: type=1800 audit(1581616312.282:340): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16586 res=0 [ 3008.590585][ T27] audit: type=1804 audit(1581616312.292:341): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 17:51:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x2, 0x1}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x74, 0x2}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x58, 0x3}, @fwd={0xd}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x1f, 0x3}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x14}, @union={0xd, 0x9, 0x0, 0x5, 0x0, 0x10001, [{0x9, 0x4, 0x5}, {0x0, 0x5, 0x7fff}, {0x9, 0x1, 0xffffffff}, {0x0, 0x0, 0x800}, {0x7, 0x4, 0x3}, {0xe, 0x2, 0x5}, {0x2, 0x5, 0x2}, {0x3, 0x1, 0x4}, {0x9, 0x2, 0x1ff}]}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/38, 0xf1, 0x26, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x100000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) recvfrom(r1, &(0x7f0000000380)=""/38, 0x26, 0x12000, &(0x7f00000003c0)=@caif=@dbg={0x25, 0xcf, 0x8}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x108f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x4c}}, 0x0) [ 3008.675793][ T27] audit: type=1804 audit(1581616312.342:342): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 17:51:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001102138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3008.749388][ T27] audit: type=1800 audit(1581616312.342:343): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16586 res=0 [ 3008.773813][ T27] audit: type=1804 audit(1581616312.372:344): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2333/memory.events" dev="sda1" ino=16586 res=1 17:51:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:53 executing program 1: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/141, 0x8d}], 0x6, &(0x7f00000005c0)=""/36, 0x24}, 0x80000000) accept$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000680)=0x1c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000c}, 0x44000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd09}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8810}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x2, 0x7, 0x7, 0x1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000001200)={{0x2, 0x4e21, @rand_addr=0x4}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x44, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syzkaller1\x00'}) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000001280)={@null=' \x00', 0x6, 'batadv_slave_1\x00'}) r6 = accept$netrom(0xffffffffffffffff, &(0x7f0000001440)={{}, [@null, @default, @null, @null, @rose, @bcast, @bcast, @rose]}, &(0x7f00000014c0)=0x48) ioctl$SIOCNRDECOBS(r6, 0x89e2) r7 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r7, &(0x7f0000001500)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000001540)) syz_emit_ethernet(0x101, &(0x7f0000001580)={@empty, @remote, @val={@val={0x9100, 0x4, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0x1, '\n!', "d8e7aa", 0xfbfb, "206206068e95cde7839c76fd8f54689819a3bf9a94921536e4d2f7a3d40877daa15ed6d74ab55a095a5a92b4d90ea678fa39fbc5ecc125246e6fb692ef3ab98a1d882a78e2cc35bff43e260bd59e2562dbba716923a48a320c66a8db9670bf0995732df73e7342eec80ad3a536e9f73fef1747e28bd2864395e65b13d24628df502b9ab95d8b5bd64e0186857e40a2073a1fe511f07eef952e69fe8b6c7d58008ae4ddf0fc279337c95d2acd4a28543e9c993baf3d00b12c9d0883e43d3aa74bdc807302ad4ddc174c433d71dd4ca5dd4f48a1859817dd19180489b5a1b930114128"}}}}}, &(0x7f00000016c0)={0x1, 0x3, [0xdcf, 0xfe4, 0x2e7, 0x6af]}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback, 0x20}}}, &(0x7f00000017c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f0000001800)={r9, 0x4}, 0x8) r10 = socket$inet6(0xa, 0x0, 0x7) getsockname$l2tp6(r10, &(0x7f0000002280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000022c0)=0x20) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002340)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000002400)={&(0x7f0000002300), 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x24, r11, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000002440)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", ""]}, 0x14}}, 0x40014) pipe(&(0x7f0000002580)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000025c0)=0x2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002600)={0x0, 0x9, 0x0, 0x380, 0xfffffffffffffff8}, &(0x7f0000002640)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002680)={r13, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x2, 0x8b, 0x80000001, 0xfff, 0x20, 0x7, 0xff}, 0x9c) 17:51:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001103138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:54 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000580), 0x10) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000140)={0x7, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}, {}]}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x4, 0x400}, 0xc) 17:51:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000500000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3010.207341][ T6221] IPVS: ftp: loaded support on port[0] = 21 17:51:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001104138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) sendto$x25(r0, &(0x7f00000005c0)="98fab35c7a646f8c4e119b6c935d0acf548c0c91aeaff55d9b06b8cacf1d1d9eb41e4f7204567ae08dec8521d54c2882111b06b07ca7ea0f21bef3fb138c24fd11e34c61696c1a2121e297760f94086192e2cbcbbdcd474b1263ca42c47ce141ede5788d12ec927a8a7158e899ffd0981786bbb647395d74395bbc2073683c009fad3b1fd487501a63148eecc785876e60040f40d809f09e942ac246d5508f8828f7add57bdb082f6da3", 0xaa, 0x20000014, &(0x7f0000000680)={0x9, @null=' \x00'}, 0x12) socketpair(0x1, 0x5, 0x7f, &(0x7f0000000140)={0x0, 0x0}) sendfile(r1, r0, 0x0, 0x7fffffff) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000580)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r5, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x50, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000000}, 0x1040) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) [ 3010.785750][ T27] audit: type=1804 audit(1581616314.792:345): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4176/memory.events" dev="sda1" ino=17092 res=1 [ 3010.975126][ T6243] IPVS: ftp: loaded support on port[0] = 21 17:51:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001105138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:55 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x243, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="3100000012000900690006342fc56aef40c74408100000e446000107000000540d0003c0", 0x24}], 0x1) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") write(r2, &(0x7f00000000c0)="24000000210099c9683bf900dbed190e020008160004000000ba008408000200", 0x20) sendmmsg$alg(r1, &(0x7f0000000180), 0x4924924924921aa, 0x0) 17:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001106138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x8, 0x1, 0xa44}, 0x10) pipe(0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001500)={r2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x71, &(0x7f0000000240)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0xffffffeb, @mcast1, 0xfffffffe}}, 0x10003ff, 0x84, 0x3, 0x7ffffffe, 0x0, 0x0, 0xa6}, 0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r6, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x0, 0xe8, 0xe8, 0xe8, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) r8 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000200)=0x7fff, 0xfe1c) recvmsg$can_j1939(r1, 0x0, 0x101) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) r10 = socket$bt_bnep(0x1f, 0x3, 0x4) write$binfmt_elf32(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x9f2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x100ee) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000140)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) 17:51:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000700000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3012.252319][T18343] tipc: TX() has been purged, node left! [ 3012.273063][ T6278] IPVS: ftp: loaded support on port[0] = 21 [ 3012.876266][ T6296] xt_TCPMSS: Only works on TCP SYN packets [ 3013.068190][ T6296] IPVS: ftp: loaded support on port[0] = 21 17:51:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0xfffffff7, 0xdd38, &(0x7f0000000100)=""/44, &(0x7f0000000240)=0x2c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000070200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff170000000000000000000000400050f21ed60000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 17:51:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001107138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:51:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:51:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:51:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000c00000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001108138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xf4010000, 0x0, 0x90}, 0x9c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 17:52:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110a138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000001100000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3018.594003][T18343] tipc: TX() has been purged, node left! 17:52:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x8, 0x1, 0xa44}, 0x10) pipe(0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$kcm(0x29, 0xa, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001500)={r2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x71, &(0x7f0000000240)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0xffffffeb, @mcast1, 0xfffffffe}}, 0x10003ff, 0x84, 0x3, 0x7ffffffe, 0x0, 0x0, 0xa6}, 0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r6, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x0, 0xe8, 0xe8, 0xe8, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@unspec=@cpu={{0x28, 'cpu\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) r8 = accept(0xffffffffffffffff, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000200)=0x7fff, 0xfe1c) recvmsg$can_j1939(r1, 0x0, 0x101) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x10000000013, &(0x7f00000006c0), 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) r10 = socket$bt_bnep(0x1f, 0x3, 0x4) write$binfmt_elf32(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46800505c5080000000000000002003e00ff030000c7030000380000008a030000060000008100200001000000060000fe000000000500000007000000090000000100008007000000a264c41bffffff7f7f000000aec98642d8ec74cc10cc32149cb09ee9d9166b3b714eb43aac7696bf3b915869985c0f4c8825c120ed88a1923fb471bc899eab74acb97a2b6f682e466a86729d22819dc19ab868e1a661b94934d08634ddcf59cad5352f9995f73bbf10de8438487b9ddb2a1e287664aa75c654e1f1f188d5d3820d7644da34be15c06f1a32729e11381b37df14d572693e401989c74543a5ed204e8013cbc8390000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075d8a030128cf2a5a03b03000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae2ded2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003251890995a2c808a47331b8fe465a4a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d370dfd6ecee29adc7bfd00dda27e9177b1d0d5264ae5933b75bd172bd575042d476159ec3437f7a0aa1b55aaed3156a16e03"], 0x9f2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x100ee) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000140)={0x28}) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) 17:52:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:03 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket(0x11, 0x800000003, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x1bc}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r3, 0x5, 0x40}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c, 0x5}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x30000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket(0x2, 0x6, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={r3, 0x8}, &(0x7f0000000180)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xfa40bd2d15b5d8a, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r9 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r9, &(0x7f0000002940), &(0x7f00000029c0)=0x6e) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x1f}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) splice(r10, 0x0, r11, 0x0, 0x4ffe0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000540)={@hci={0x1f, 0x4, 0x3}, {&(0x7f0000000400)=""/243, 0xf3}, &(0x7f0000000500), 0x5}, 0xa0) 17:52:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110c138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000003f00000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3019.112499][ T6377] IPVS: ftp: loaded support on port[0] = 21 [ 3019.192524][ T6385] sctp: [Deprecated]: syz-executor.1 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3019.192524][ T6385] Use struct sctp_sack_info instead [ 3019.574437][ T6388] xt_TCPMSS: Only works on TCP SYN packets 17:52:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4624, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000140)=""/67, &(0x7f00000001c0)=0x43) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 17:52:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110e138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x5}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x48, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6c}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x54, 0x30, 0x1, 0x0, 0x0, {}, [{0x40, 0x1, [@m_mpls={0x3c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}}}]}]}, 0x54}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10010, r2, 0x3911f000) socket(0x8, 0x4, 0x3f) 17:52:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3020.327694][ T6409] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3020.365934][ T6409] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001110138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$SIOCAX25DELFWD(r1, 0x89eb, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201a802}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 17:52:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x2, 0x6, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x9, 0xc}, {0xb, 0xe}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x24000000) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ppoll(&(0x7f0000000240)=[{r3, 0x6000}, {r4, 0x502}, {r5, 0x8232}], 0x3, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300)={[0x9]}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @rand_addr="00003c91002000000000008000"}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r11, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}}, 0x810) r12 = socket$netlink(0x10, 0x3, 0x9) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff81054e220200000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0xfed1}], 0x1) 17:52:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000008200000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001148138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r1, &(0x7f0000001600)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @broadcast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)="64e8460c6fd3558e10fb6fa9a8b11ab3014f93c4e201ca8e2cd23b7f46e793519f3b18b95f96f6289cb37db118c3681f6016e643006db6d17f4d5bd83290c3c4aae45e0e48470de6619a76e86577a29fe5ae12102b801d6c79479c308fd5ea8e75cbb3b4e9a7ffe0064a4ede6d966814a2a3480a7321e9a6b4b65ff51a89446db40776a103e01f2d53740338bf0212015d4577bc030ea4aa579c43d43c3415473c2e42835003f4af8985de86af91742ee1e91069", 0xb4}, {&(0x7f00000002c0)="77ea3b31785d3b8c0b7a27679b49d7fe4786d1e4d004feb434769d8e8318c6038f0965a66976391fcba85a21279c67df3857ed4be8e7bedb7625a36d8b766d85ae99f66adde78f399431643958b7e450a7bab6bc32106cd605ceca795dd705c6df9893a8b44d3b002a562385cae4c635eb562fdd0403d4069499851b641e5cc6ba6b5ecdea53edf1d69291a799afdac01bab966e98db44a659fc88c224884d54fc8f3e35031bf5467e7beceae7b0d41ba03f5961", 0xb4}, {&(0x7f0000000380)="2b504cf1ce38c5971112a467be75260bf5e3ac38737d4cad95d455df1d7e6ccdb6000d120b09fe32622a889fb3b52784ed9613432e06", 0x36}, {&(0x7f00000003c0)="f331ab0e8df887c7c4631765f7c75f626cd1db9a3fcee94354106b63247c18bdef0b30d3225f2051d493759ff53de147efb5544de541e20705", 0x39}, {&(0x7f0000000400)="c05b42d962ddc769e98abaea7d2cc9ce812a3cd6d15afbd4353a8e9eb86ac813d6c003dbca0642a4d3d0a2e93b625e9f2641", 0x32}, {&(0x7f0000000440)="643797484fb9ae95c886130438bfd66c657d540b7ce2133da77f23bc4d69357c41586616e75236b2f9e9d77846579cb40a31a211c7726852f1337c8ab18753083bbb460be0fff80a42429532f7dddc65f7fee8ddb435a947cd0eb1cce87a6347727ad9a8e86a88cb8b64ab2ecebbc0aec52219d6398f2a55fa937b73ea027f1522b0b7500f309261e56c2154500c19c4c5fe87182cca23d34426535987e404b23bcddc9e62e2163c9016cc4e9ec74069b620b908d637fde5f75875d64666bf71a56b26ee", 0xc4}, {&(0x7f0000000540)="06dc0a16a3d65d0e9a63b98d0ce753e3654a0cfd35ce00ed30fe219ba51d9f0227ac6f4d1f841eec6057388184c7aebd7fa17b32fd13747bc50638ba020f5dae6463c9fae8fd40ae2b9548079c4703ed2532560a2ccb3c4ee0d20be7ca459badbc97c9a6c0232ca28c698c404ed5c2c85c5666744de5cc0536ab750e8aa0000699b62a8c346e022e0dbef7ed57", 0x8d}], 0x7, &(0x7f0000000680)=[{0x110, 0x108, 0x7, "9fb33519b560006b52d996931e66ba764f7fdc7ceefe2151a7c9c98a94762c0c930c6cc42b65bde6a22c2b4eab1e2bab90499394b58a8eeaa890a9a2a508a903fb01a30e72489fbf2e0d042ea284430c9cceb3d48e33622e5e4e92e6b0d9e5d07595e014cb1aaa1e6bd6c184db3b1551c2e992bb62a49b19e81315d53988963a176fb491d4eaf7a87913c4ce08f31edc0dae932de464653f1166157fe78abe3bf177506e0b02cdea049faf16d16387f5d95a1922613242d903bf38c94430647fe22d497e4f0883666416666fa49e2ca83bf471853019d986664ad0fdfafdfc883ec27adc737a3325693d3551c0970c794f49df2c8a3c69f856"}, {0x50, 0x10c, 0x5, "11264bcd4ee8c1d92c0e2b22f24dab2f172df3087f8f0e2600c89aa812dd66662eb3a1f70a29200f212649805dafa4d3df2c7d57f1632cddb2a1b359e6"}], 0x160}}, {{&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x7f, @ipv4={[], [], @local}, 0x5, 0x4}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000880)="bee544b61d5c5abfc7d98c1d4ea65e9e08e94ccf6f3e21153d9adfc0c404f05dc50912f8c24ec48a073a3d6322effe4d95c2309b7fb5a82e1efcd29aa8d2bb2fecb9ab11764320f47c0b6004dcc05040def4fa4d886cf1fa2560dbe615d64308f21bc806bdb0670e4cf0a69695d7df941e0cef159d62b45390639ae5675cd49d4d43e111118757c549d386cfeee95a54350ac38a2999f31cae576750a9cd869d443352583cdaef9f33f23e4f0f493e5bdc4cf28840fe4c7e2359148c157beffd2dd917f0cac5e98ad1254f3252a2550435532c3b29f710f75e7f7705dc265df4f66c3945d4e6c634827d979be0e1ae7151d44a13e097", 0xf6}, {&(0x7f0000000980)="72eb134644f3039f5b21f26c39b7246987078e14e54b60463ec2c1a41c7eab6690a316b1c4d26b32145610fad5fc08b76ac52d6ce22f9bed0f9ca7ae4cddae3398e4df092a98014896653f0dc854685c2b00003c2c16c7cbba6c809fa9a64f53ca9e46b4b5a620b674d50e19a2170f65fc2160c151eb94cbdbae8369624c81f75f067ccf1d6e19ab8d", 0x89}, {&(0x7f0000000a40)="875a5dcca32868ed5b7ab1abfcd70ef675ed97d6afe906b679a79546ad5b31952b67dd204e067d210d557c779f4d75ba6f1dc8a2f22a08943fadbe3e0a9571d74981b3e33abf8330b4a89739224b9d21e49e6ff11cf64c2c509fde42f8ce08afa42a35619bb5c9c67333d6443f4b66d01150be8ad34c32aea674f3c791115b392c64a37e4a4c18227266e5514a8a39205f4137b377ae0757af8d5e3eaca5f175461489d587a0c43dfb45301ad7e8363d782ced6be34878cf1f3c158e89382f356f19ae2d0e206b5e132a40ed224d3df6c6de03d958217f922623d5ad10718adcfa686d29e0e8eced1354", 0xea}, {&(0x7f0000000b40)='CD', 0x2}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1a8}}, {{&(0x7f0000000d80)=@l2tp6={0xa, 0x0, 0x8, @mcast2, 0xc2, 0x3}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e00)="405ad42af19adb398dc2bc1607163baaaab60a065c3a9d79db2e524fd6514a8bf6bb7f73977313bb9e0ebe1553ef1e72337be8baeece6dc23782b7352dcfce70581ffb35d6452c2e83ed6d3244d91537681526473419b8e59ebf39e93ee6f23bc517b962485cbce57b569d903495f6f0985fac9750b54637ae5307e8414804a9db25f969bbf2d65d0a2e0c0b72e07d43bcd6e77e12fce68ed46bc5d931a221271e669362b3a760668f9d1c", 0xab}, {&(0x7f0000000ec0)="d01a31723da59d4f3e0940d04546c1a71cf196bff8b7953d5ac65fa98de730264851695b81cbe39c6fa74207f40f22b60cc22154ff017c413c7bb3b74bf244a81862a72c7d26d49e4996bede5cb19a71823361c8bd63317475c8419bff9bb12c6ef4756d7a07fe7d37ed500be2e3f60c683185c5ea672ad5e385bd52", 0x7c}, {&(0x7f0000000f40)="5df61f73fb3d76163934ec4967f91daba001967cca1370fcae7ff07301a612b11bd11eb012394d8f5cf0b42a16c4cfc6574aa9f7d1507c453e03cb42a1693b93ec99b5ed2fff874bce9a2eeec7e31a7bd084328cec7c69b35462f5a2b2d23041bfd99293b5c2123045f8797f245074bbc4f847dfcbeaa1f5c0e72e19b552fc3d0f298b3b8e", 0x85}, {&(0x7f0000001000)="0f4e2f645c94b6de2b", 0x9}, {&(0x7f0000001040)="92857abfe692adc9b0436f0f55f4b8b2d0457b74451979b2ffbd5a3a33f6fcebaa77b7d46e97824b9ca76f0d742762e4f82aacf975a7fab0f435b46eb0cf885c077c91ac8834d41f1e3b521fda6a6456a78ccdd1a417eb9101605779ffb9ed4d011b83c12d67a0a38ff2ef6551c3662439ef143a3ce5631ceacfbb966279e2a1b732549920b91613ddad068a97698aaed4d665685a37d1674fd25eaddac61279853d2be86b967d76e72dcbe50101f45f01d8adb6e2b7defa95f13f8cdd7790716ca397fb5e89393caddc36099942b8ad75a76b3821169a785ae700000f30", 0xde}, {&(0x7f0000001140)="ea99585d737b66ec56954ed1fc615c06121fbaaea685ed539e91e2304beea2f4f08106c5f4c98502ecc94cd51b93b78a29d530061e4101d09884b714fed0deab3a006e4ba323a7bf0b303bb777b3d2d32989b3bbfc6bed1175d8112e9c45c9775ade5459dc3797cd21a0313ecb01fa99ac19e1ea9274a56565fdf93bcc01234f5f220a2b6a77941ee9907ec1512349", 0x8f}, {&(0x7f0000001200)="2030d5a9a8979f15a67213e5ba233b6c5577b8981a67dd1364aec5200f1fdd06f2e3b678f5708e48780ccbca526c3807d9de22796d66eb838a1bce3c7ff38c3ca81f59e68959cb24d84e3387b94a6902839967753014cc769d83fdeb8caee3b9d1304ad2a036ca88d60b30bf82c1e5a319b7118a9c1e6d981bd12ee044ebdd7af648119e922abc1cec987bf333ad82575ebd79e826568e327d7ce6381ea27c3c4fa0f4e391691c6899d108a88033f4dd2993fcc1f3d301da4391a69285a1be6b4666c42248f834c6f533ff577ebd741e499ae916213f0eb3e73ab9d7d4022164eda28940932c8400cb2c96a9937f146b0073985b25e8d47452eef47ed269", 0xfe}, {&(0x7f0000001300)="24a51d76527923c374be3dcec086a16db7b321464f07ad89cdd5f8dee5d034e1fd71698d4f1c4bc4333622288bb08a8f27b8d69630c2ae23e3702172df3909abf1c9b37acdbe648344091c3d9a774e6910c0fc767c4931769cb457c0a85ea43f69fd835f00d062", 0x67}, {&(0x7f0000001380)="9ea2be037cda8a475eb04e3d55204095df9358264dfe508979da6e7c1a72e2e3a8658216c5e58cc68886c0f6a11eed8cdbf50b5b393a169b737d17961b10f40c57a4c139779ad8da31906e9f2602db89b61d289f2cfe402e741bdbd401ea73c35822703a16", 0x65}], 0x9, &(0x7f00000014c0)=[{0x40, 0x0, 0x7f3, "ccf020d669c0d1f0e332295ccbc5832729e26c0e4280f5d0d6e6c04d34bd5445721eb4992cbd6d8c8951bed22a0c"}, {0xc8, 0x109, 0x0, "da3b289110f74a3a5d6a22a032bb2719db26139e7039c3248dbd340836aff04d8a903530bcd4a49274219b5d3cfc2dbce9f0e59471d102443416685dd2635d3c26d46752ec0b99977e3fb968931691efa38a816e7bfb15b31bf80118eb3c1434119f3774bd7fc5f66091023cce3f97b661eb0ae84bcc60002b20c9f6dfc5f20636411e639bf2bebfe53e724fe151e5cef0527446255f0eded3a18bcc884a8e349e0ddf9805877b0aa8e4ab7a675bf67631339a0c"}], 0x108}}], 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x40000000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x1, 0x7fff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xfdef) pwrite64(r3, &(0x7f0000000240)="a7", 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000200), 0x8) pipe(&(0x7f00000016c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 17:52:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3024.154555][ T6447] IPVS: ftp: loaded support on port[0] = 21 17:52:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000114c138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) socket$inet6(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x1c, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4800) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4040080) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 17:52:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001160138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000010e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3025.513602][ T6456] IPVS: ftp: loaded support on port[0] = 21 17:52:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:52:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17:52:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x14) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x37, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x78) r2 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="39000000140081ae00003c9733f5f087110008abead99025e4ca9b4e7d0f6298db85d0b0e62bdbb7d553b4e921556b3d5df500c250825702fc", 0x39}], 0x1}, 0x1) 17:52:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001168138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:10 executing program 1: write(0xffffffffffffffff, &(0x7f0000000140)="240000004e001f05", 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='$\x00\x00\x00Z', 0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r3}) ioctl(r5, 0xfffffffffffff001, &(0x7f0000000180)="e48f95ca81c7beef08e1478f6491ca076230d7050192eca226187ba4f5e1aee64bbe77e8c357f0986323a8f7d1b3aa7ea09a838ba64afbaae919e5aeab3fd63d085db2bac5f836960e3973a6b96abb25d01a67d536b450cd682105f8222a493c213185a412d6add6d752f6c816271ceb6579aad95493c114943c7b1b7af021fe342dc7cde2ac26a914c8467ceb4099ca5462cb85d1080a880dbd24b2f57748e230eee61309a51488f2fa2c5a39bc") close(r2) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000100)='wg1\x00', 0x100000001, 0x2, 0x5}) ioctl(r3, 0x1, &(0x7f00000002c0)="730163ecdecb3722d95f88bab6e805210d0e8fc929da0979d3a97636d95ccbc29be064d9ba495ecc46c7a953cd0e644958902b4c04b0dffd7287eae43baf4155cf885e176246d7508c4c2076c584a8174b89fc2238a690c047248a38d5cd170613888174b6657137eaca6e9143f54dd8649697cec3eb5e20edd98ad1c329a8719cef3b4835e177df406e65a02e9bb7b2d37cbd103f14c557eda274dded3d9466bb3617743b77c9eb4581981912216005525afd74e4224853a2aef14d5754eb14d2029d1daf34e2074ac3d6a50d65e05ca08a888ed70cad73a4d24cf8f7c1149df5cb53bcf13ec075589e51dbc19c79b9") getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000003c0)) 17:52:10 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0x4) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1, 0x0, 0x0, 0x1f4}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x7f) [ 3026.806897][ T66] tipc: TX() has been purged, node left! 17:52:10 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32, @ANYBLOB="ac2c000000040000000000000c0080eb8600000075700000200002001c0002000000000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8f7bf7afb33e23753792aafde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc083cc62aa68d1194251d76c3970936b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) getsockname(r3, &(0x7f0000000180)=@sco, &(0x7f0000000080)=0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) pwrite64(r4, &(0x7f0000000200)="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", 0x200, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x10000ffe0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000100)=0x1ff, 0x4) ioctl(0xffffffffffffffff, 0x100, 0x0) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r6, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$inet6(0xa, 0x1, 0x85) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r9, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept$inet6(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 3027.002602][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 3027.002620][ T27] audit: type=1804 audit(1581616331.002:352): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4186/memory.events" dev="sda1" ino=17123 res=1 [ 3027.037829][ T27] audit: type=1800 audit(1581616331.012:353): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=17123 res=0 [ 3027.059990][ T27] audit: type=1804 audit(1581616331.042:354): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4186/memory.events" dev="sda1" ino=17123 res=1 [ 3027.143125][ T27] audit: type=1804 audit(1581616331.142:355): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4186/memory.events" dev="sda1" ino=17123 res=1 17:52:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000116c138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3027.340442][ T27] audit: type=1804 audit(1581616331.342:356): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4186/memory.events" dev="sda1" ino=17123 res=1 17:52:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000180)={'tunl0\x00', @ifru_hwaddr=@link_local}) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14) accept4$packet(r0, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14, 0x80000) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008}, 0x4000) recvmsg(r1, &(0x7f0000001a00)={&(0x7f0000001440)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001880)=[{&(0x7f00000014c0)=""/104, 0x68}, {&(0x7f0000001540)=""/122, 0x7a}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f00000016c0)=""/93, 0x5d}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/27, 0x1b}], 0x7, &(0x7f0000001900)=""/195, 0xc3}, 0x2000) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000001b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="67a43a21ff5d"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6357dc889ffb"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 3027.545002][ T6555] IPVS: ftp: loaded support on port[0] = 21 17:52:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000020e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:11 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2f0000001d0081fd6d0000338f00000002dd0700060000001f5f03c9080001003898efab", 0x24}], 0x1}, 0x26000051) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="240000001a0007041dfffd946f610500020000001f0000000000080008001b", 0x1f}], 0x1}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x49249249249252e, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") [ 3027.936427][ T6571] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 17:52:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001174138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000116c138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3028.467457][ T6556] IPVS: ftp: loaded support on port[0] = 21 [ 3028.483804][ T6555] €Â: renamed from tunl0 17:52:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000117a138be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{&(0x7f0000000180), 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/160, 0xa0}], 0x1, &(0x7f00000002c0)=""/138, 0x8a}, 0x3bd}, {{&(0x7f0000000380)=@caif=@rfm, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000700)=""/251, 0xfb}], 0x5, &(0x7f0000000880)=""/75, 0x4b}, 0x5}, {{&(0x7f0000000900)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/153, 0x99}, {&(0x7f0000000c40)=""/104, 0x68}, {&(0x7f0000000d40)=""/73, 0x49}, {&(0x7f0000000dc0)=""/233, 0xe9}], 0x6, &(0x7f0000000f40)=""/110, 0x6e}, 0xf5f}, {{&(0x7f0000000fc0)=@nfc, 0x80, &(0x7f0000001140)=[{&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000001040)=""/231, 0xe7}], 0x2}, 0x9}, {{&(0x7f0000001180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001200)=""/68, 0x44}, {&(0x7f0000001280)=""/167, 0xa7}, {&(0x7f0000001340)=""/46, 0x2e}], 0x3, &(0x7f00000013c0)=""/181, 0xb5}, 0x7ff}, {{&(0x7f0000001480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001500)=""/24, 0x18}, {&(0x7f0000001540)=""/183, 0xb7}], 0x2, &(0x7f0000001dc0)=""/132, 0x84}, 0x4}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e80)=""/137, 0x89}, {&(0x7f0000001f40)=""/144, 0x90}, {&(0x7f0000002000)=""/23, 0x17}, {&(0x7f0000002040)=""/250, 0xfa}], 0x4, &(0x7f0000002180)=""/235, 0xeb}, 0x7}, {{&(0x7f0000002280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002300)=""/248, 0xf8}, {&(0x7f0000002400)=""/174, 0xae}, {&(0x7f00000024c0)=""/131, 0x83}, {&(0x7f0000002580)=""/12, 0xc}, {&(0x7f00000025c0)=""/19, 0x13}], 0x5, &(0x7f0000002680)=""/115, 0x73}, 0x7fff}], 0x8, 0x40000040, &(0x7f0000002900)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xec, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff407000000000000040000000000000009500000000000000e83d24a3aa74d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0e168c1886bf0fc8f8d56ccb659427cf8593dbd0d4d94f2f4e345c652fbc1626e3a2a2ad358061011fbc5ba1f07318988e6e0dc800974a22a5503ceb9fc474c2a10034deb277beee1cbf9b0a4def23d410f6296b32a8343881dcc700005f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449ab6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d0400000000000000b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b211624f40401691721715f46e01abf0f926d8e635a663739a190a4e822ba3ed12d63c9c4c508523e173650664d1000000000000000090e415bccbe158024d8d4939e6fd9adc43f0f4b04921adb92bf466e934330ed79bc9f626f68b0fe8519357d194ea0b852d495085ff4eabaac9606f0497958c2c357a71249f6770ea6702bc43897bdc30f6e54064efd217450a975221b20d781845e3da743f8d687b0bdb06d71277671bba2c550bfef6295e50b8ab1feaaf0268c4efa45b564d5608d87c4832e4295bf8889e5db2a70f6a83d4b3cdc13e46d276856de6d895704ba3e8ee12bd121ffc4f5d2ae03f0227dcc4f3865e918b07ce58bf176e253364fed16b128584f897400d4f5503a6e9801a480e3221f3c247ee8c550edee060e487eaa25a7689699c9c305db4b0181f0f653fac399fcc0cc800e82bde039cc29c19b538c72e65642875bddbef61e5985751d902e5e922dfcb3eb7a38854681eebd37d2f32375357b5d2b4dc24baa6a7119038380f7029a292f1adec1de866570a9f2a97200ce4e870a819aee29d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00555b6d2bec249c0612540000000000a7060d0d9b9ad109b62d1dab0eec1deabc76d765b9ca67474e9a13366032fc9558b30399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf93d3711a4359d68ec71b0693e0ae1c45d946420c2a0310036b4e6d18e797697901fbae4a9d9966b68eadae75e0bcc7b8c34b8931b0818a57e5136fb8c73283b17d8fd33c2b8d321a6cba8743114fcff01e5c13318aad61cdc82429a021d692cd31cde5d77f0cc00919ee8bfbd34f67609cfde21e76b3b7b08d49a21d6b1fdae83e5ea502d012ef978323fe36685e652ce1c38a9cc9e125a4880faccaf5ac2345f20b1ee403885796e91d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf275c759e73d5d292b837e88298150e8a9f77fbb777a0a47ff69cfc31eefa2b08f184e566547c8d7dd420d247bcd5c5def075a68d11922389b94606051afaf1d0132e5112513c3bb8da1b556ff31deaf11bd7b71f337581cc17ddc2b3018418ba61eba41430e0f7fa962562dbe60294fb4ba4e12e83429dab64c19e0000000000000000006e34bd6e16b0ccc3d542f130cd434c179e2b0ea8be0ef7fde5c9491f50678674c9af4760b91d4cb05e15a71205461471e77e5e427702ba3f938de58a578def169bf6528b6e1c34b32f6378dedea2900e781274597185cbfcbf9d504ae4068b4dd4a8b6028c81832f9481f72cfec59d303ea24857746116f41317e992045e622be64e5715639fc1349eea0c37bc38e5c188e2abb61a3cc8e9462c92ec49760684838dff991611d0228eb7b7d302000000000000004d24082dae0bc02b9affaac2ac84fd06668ddc46367562deaf3f4193205efd1c7e6f89f46322fed977de471c8707438be3a4d00ef6ea54cc8755e7dabb5d14e36a0b565f4540510e56357ecdb04f3a9f52ca227d017c7b4da7f53893c10d5af4d4d532b15256e5a35329f0555115c20af0fd2433607936b37f4385f772085d32c64363c9083402c9e43cd1ee0eae723e5cc83573842dbd5b0e2e314db1f0210acf32dd5440d166bb487e9e34e188718d3517026df88e2244265581868c637e1f550039ca1cf9f92d54c22dc6a43da3e6986d48c1763c6e668c29693e41725000000000000000000000000000000021ec2f790b18d763ad9c7ff83d3bd0a618b7b07e6a85a0c5eac4c10182d54819a6e55fcc81e4320c010907cc75ff258dae62e1e28048fb99a94f30f6e83278ae62c41faccbbe06760a7dc2837deb0b4f6d1279ae29050a58cb881eddd8b115e9edeb9425018c1f9bf33b0a98182c9fd3c57a719e6ad5095f6c21ab6a762e9cee612144da96160c0c7821796e8852dd3a908358c2ac3c88d6856e5b507ab9f5337b1178695b507a8b9275385d0104048b75475638de77bab346ee183cc6db77982ac20bd013af51964280574834aa0efee729e9a03b31c327862e9372f45d2b1f9c8f2ed01658708e9f6759d04c014fc75c7159dd839fedd4eb2bffc0b22e1cea6bfd7bef82f88eb4110aee3a2f739667abc6bd0c8ab8f5c629535f9ffc0938d7e8b3a4f25a0b535327d56be0885df40f1e4e1b1a864b917cf592dd24171442c9f331d0afbd0507cede6ff95ffc2b40dc438bef1b15a2d68588b46e7dfae44e803ef1c6e3b43418b6d1ea86e4de5932ac366a40955f31c149fb562e2f64f61ab4c210c04de139f24da76196e9"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000002940)=@alg, 0x80, &(0x7f0000003b40)=[{&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000029c0)=""/65, 0x41}, {&(0x7f0000002a40)=""/147, 0x93}, {&(0x7f0000002b00)=""/63, 0x3f}, {&(0x7f0000002b40)=""/4096, 0x1000}], 0x5, &(0x7f0000003bc0)=""/88, 0x58}, 0x1ff}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c40)=""/153, 0x99}, {&(0x7f0000003d00)=""/167, 0xa7}], 0x2, &(0x7f0000003e00)=""/194, 0xc2}, 0x3}, {{&(0x7f0000003f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003f80)=""/209, 0xd1}, {&(0x7f0000004080)=""/153, 0x99}, {&(0x7f0000004140)=""/95, 0x5f}], 0x3, &(0x7f0000004200)=""/234, 0xea}, 0x5}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000004300)=""/222, 0xde}, {&(0x7f0000004400)=""/128, 0x80}], 0x2}, 0x6}, {{&(0x7f00000044c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004540)=""/135, 0x87}, {&(0x7f0000004600)=""/219, 0xdb}], 0x2, &(0x7f0000004740)=""/178, 0xb2}, 0xfff}, {{&(0x7f0000004800)=@hci, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004880)=""/93, 0x5d}, {&(0x7f0000004900)=""/107, 0x6b}, {&(0x7f0000004980)=""/131, 0x83}, {&(0x7f0000004a40)=""/210, 0xd2}, {&(0x7f0000004b40)=""/144, 0x90}, {&(0x7f0000004c00)=""/125, 0x7d}], 0x6, &(0x7f0000004d00)=""/132, 0x84}, 0x3}, {{&(0x7f0000004dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e40)=""/222, 0xde}], 0x1, &(0x7f0000004f80)=""/153, 0x99}, 0x7}, {{&(0x7f0000005040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x80, &(0x7f0000006400)=[{&(0x7f00000050c0)=""/105, 0x69}, {&(0x7f0000005140)=""/83, 0x53}, {&(0x7f00000051c0)=""/149, 0x95}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/173, 0xad}, {&(0x7f0000006340)=""/147, 0x93}], 0x6, &(0x7f0000006480)=""/52, 0x34}, 0x7}], 0x8, 0x2000, &(0x7f00000066c0)={0x77359400}) bind$unix(r5, &(0x7f0000006700)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x14, r8, 0x401, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r9 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000cc0), 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000d00)=0x3, 0x4) 17:52:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000030e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r1, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f00000000c0)=0x80) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="39000000130009006900000000000000ab008000200000004600010707000014190010000600000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) [ 3029.839048][ T6619] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 3029.996137][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state 17:52:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x7, 0x7f, 0x2, "0b31235d34b6afcd8ca2243ce43eb3e51b6e5f3e49e25be9b9845f59f4d053ec9424f424def94e49b9dc702252baab3cab3a70add8c0a3548d314853a6e5ca", 0x24}, 0x60, &(0x7f0000000400)=[{&(0x7f0000001f40)="31c520a97586535184744cf194f271137c886ede2b581421ab7f69542721e11085d678a1ec45bcd227f4e57b205c9ba5ea8b0c1eeaa45417e4dda9ab1e3f7076d8885ffc4e63f4f5eb231f0ba0958a5247125b4447225c6eed2b10ac65726f17fd29e14d69e6afe7c9920a720a042c1612e39d8c327812e0b253a35fdb1c0927418f6618d08ed858891447b934d17768e48f3f63d2f571acb513b7375e99ac873edb8ced961b730aae9f3072271dc068f507bd5d25615d404c9b58221d5cea1d9216cac767b076d1025b380f7d3d50c2e7ff2cf11ef6d1bd6dd3530792c34b4ed7e4383b379527f6e6032e976eb3da8ee094832fac0c6364d410fffbcea19290f7cb472146464c52fea91be4546c0535ed9c4dd9af22d3f3649beafd0677220688cf8d29b149c15d1a26467a9a34a931abd93304f4bd7be9ed1970593f2ba176ea70417556f636dbef014609c69d4baa25817039c9b1bbd07e8a1f6f0f3827e4452b5c5c7dd2a5c36f28d9c3eb77b39a65e2b9cefd7c950d173385276417c773f8d491163ab4d93c70f846d3dfced96225e667416460b4354daf992acf821624093df931775beff9dc6f3198433e32145068f3eb3f9f3fb4b44cd14962a5a2a1e3bee8eaeb99db62c269c3318de6788d1f590482f796069c0831d0793caa204b0b8a2db0994f436ba7a737a686496d3493777d1f661fef06294f1cff3ae6c4cf83ce524053cc59a0c1a6482470b29aff721b15812c527770af325fcab1e10f2a72d2db00becb903331ae7d46e6bffc82607c9fe116456db682f81f94c454111a54fd94df40a0f7ec96c5da13aecd5ceac991550bff944906fa29e41915e0a77c70462ae5c01d033f45ca7cb361804ba36db40988b591f35142d87c00e4cc873970de83a514ba4ebd01fcafa583ffbcb2fe05f27bba8fcbbd191aa464134f45b2eb85e2b6a558559f596dba39c059d55d3764814053d3c9dc25ed1c970bb2552f3d31b55dd1ef860947bebfdc4d8ebbb584804a1b63fe7a8db666c99f4d970dba1d8672d410cfee8fb14feb044ab41205db4aed00a50afbf97f5fde954032d0ac101f64133ad9299da659c1441dfa4ebad7402c78a1b00ca53c19c865805bd02d153ce37d32a2247acbe841dd0701a3f6299fc4f9f78f88fe0684b5100a320ed36698b7d6773d3b54bab0908d489fe3f1afd82d41eba404cbfc96c1a9b5405d54b510b29c524ce647af160d38861b169419be1fda07941067da30c7822b8486d472fbddbad176ef0d77885317358efe3213a4e378638fa33cd77256eed12476a7223f7b4971f16bbbbf60236a015efa6a335bbeac686029d32a78dcca71e73e1a8993c1fe13f8963904feb0070fbf4cbb11f600b3d967fc9d3ccde523f31501b489159785cf3c3aea86fc3aa96e27f932a184c7d635c5053c3f4a7aba8760d81c42d47c655b9404d768b1f822d373462014040ba4b27a8edeea77a323e9c09b3179c02b17117c13cf0fff4b564bf8e8ef8619beda14383f2cac9b617e88284daf81574f5d493bfb30a53d2b3b597766a14be4b81df6664465a4d6b0ca740c6f66bf0118800d4444c57244bb315b5040cf70cb92deefc9bc967a0fe1be1a95458967f4bfdda598c742155877ad412707e65012ddf3003f2c7106961d176c46a9522fa78423185b7c3a02b18604bc2d0e3f38784b7addbaf866e4a37a394ba9db6bb05e417fca6ba06f9da72c3e4abd8aacce921c7690074ad91181ff95d496f9bd99959c156d2825fe99eb726923afc7ffb97c9151159bfa54042a614ef9b3d9e5b8833b6d2e8b655eaaf9833a145cbe1081c415cf3825712ac5854904d529a28452ca61dd943883d59da954f1b1a57520b2c3db8e168b0ac936d89f98ed59b30575f8eecfaa03c8f07c97a0ac329b2d28f96f57f46744347a8f84d36c6e292476c1aff8f2f71f04eabe651bcdc4c2c746a7ec7ab93119ea81df3aaa3b8c2b7d550c5348c5811344887ebbede9c0be8c6f282beeb66d2e97cec6ca6881df4ffb6d7f08e954313b94e621962466b74f37582a5ce96fc71c2778d1c35a3c451982c450eb149dc6c402a77cf1dc0055623ef42acf384913dad27b9f652957c3d191fda8ab4dedec7f14c16265983424d2c80c627c0d00a51165fc70f0da448e9956ea3f34c502438057b9b5289563acf31d0d417730a3cd585f90d787c4f521537647a442c328c8cf5e7629768c58c322e4b47a537e3b4490d6c0a283cd4806b259fe364949abcb507691c670820dbfe78c548a3ccf2495b03f073af751270d0bb770fc75d4b3896c1c9d2c87a7a6dfb44a387bcc54aa6d86fdee626189058d60f44007d3038b3645e9fa812a90f634751a046fca2e5cfec040f024e03975110d6d0dc6778837f2685e3c0cf206c2f846f146523726dfbb75a138bdd261987226b6f75a42ddf6b30ce299bd8cf5b58c85e9f28fe3ca0367835b7cb75db0f6969aeba5e8e9addee2db1ce7d316126a7fcab8e20f859f4d2d19f11b587f7d047acd24f8b4e6a0255b214b67adf7f496729dd98f628aafa3bd3be73b5c2f62e10c875fce6c83f6fa0e6ec7fd3704c60eb3acff45dac0b8532f12a870f7280b60eebcdf7d491768eb63698f70ab15ecf0f7ceb2137ac79a5f47c5a47abc27be7bc099cd44d8c5aafeb0fa0fea01be316683cc1b383411450cd9fb97e122758b7ccf82389d03dca9e8e3f15c9b98b6523aaa0280a604e2611a17400f1fd320c37e4fe77b8ffd5e9ad95fc6b1bd88c48d6b103f35677c1e6cf07c26e3edc1df5f74eb1dbdb3f64a2a1effbf5f5f9ed99f265b3a6d5de3d4fc0f109e8dc1d468c782e10adbf546d8a84c16ab0bda38a44770b4220913d0d79f1b0c79a9e3b23c98f2ba7b3837eaf9d9d089c10013b27ce53454b1264f559d556841829a1c2b07333ab0f462297b77277567c0e3632c382fb7434a7c899ea5cc0ad5e0e96762615c89df45a9a7f128ada5d344d40bd5905c3033b7c842fa56170dfdc8650060865a7b8a4eb8f1473fcadee09e7e59a3528b6b6fdea70ebb086978560f8be671c5b453b9fa13bf7af73a0edc3771c057afce4f9eb336b3f08117ee79bab1fe1e65fe59ed0401b6ef4d8e2d6a8dd2d58f552d8266dc3c06cccc832f899fceecb4daec9a76c7af31dc51d2f65d98c4107568863e283656387f4bf597a4fdaec1c127de2d864f7a7430e7603254f9980eec655efcf8fb0f4bc07435a60c579c2fba7119587d2230d08b590e92846bb6b5d6b8fe9139acc28a6e10d894452af9bee51315585b0aa8809133940975241c58a820bdbfc099e7f10d457a8ef9c33c9ac1dd2fc6522ff064724b83afe5f2c8bc7e75ccdc549827b92c9075dabfc4602c8a5395d7fe57b07d299a7b732e483013f7551dcc1963de1b7cf6e28819c7d9da89053397f3ceac1392b10377e61e0cc3eb37d46700b840ee7f334b6a2185a869e9630fbd0c7e317fcb596d7b58082a5d140b56f627a0177b7e8aadd5f20f088efd4ed0ed1c332014cc77cb332a9889cfaae6406f6692ffe343225dabf1f47ae68500e455c161d359152933d989009846781462883007f67e579201777363186b2fafe3aee4738b0caa5b4e956dbe1424f447dd2a97b289adeff7498bb867587895352ceaaef65fb8d5992ed754a48a979784397192c8688c548e42a4a803e5f0c070a39eca9c8f2dcab591913a049d743f084de4e85c42c13c126690298ed57bf9166886578ccf11b20660ff9cc0d812a97087e98824a6061a7f03bdf6c8655b1b2a8fcdc07b8d5992a36c4a48fd2b0613b9bd77e26f584ab85ebcd858cf856f2447c1b4acaa6032162dd81eaef5907dfa45934374d4c02cd6e2666a44be098ae46e86e045e0925fbb48688d737169ace189b93fcbc342dc1d35ef2142b57ffb955f39f96a7a517adb7e303ae363b4d29554508309f714c3db2c18ad933affb6ac776d4f8c31bde5cce5c06b054639a8c05c32498a207a58d92d8ad7343baac8ffe0e254f246e466fec1eda7237c77cde01b745521042fdf04ca30d3d502664cbf76b2c0c00d3d9973b4c1969e4012d2551f6c9b9ad9e850a2ff5c9ee8d73458e65961ca06192ccd1a4aa4eafbdf44ac33f8a7a13319173e228b9ba62a967ebd25bfc9e3f431a43839ae8978e112210e7cd8ea5067a76d9a9e0d32650d8597ece3427f0fa6d3d4cb963c0ea1ca218c04e5f023154cd3638dc28c0897e30e221bd0901d919a2552e9c7515695b374d100df013a9f4323fb0e569dd082544d4bf2b21420ad0d78d6d48e20add53f4f786a3269c63ab2ab69d1ad26e852bf8bcd9d35a5115c013b77df1c48a870b6be9813c1026d95f0a4ac3c7079bab27b0ed537f6914a4e7cab3446cfa460b570be0b55ae3f4f49e6f12a28885c6ddf9b9e63fdcec57135b6f45e440938a3b9d36d49de6021fee2c7b78b942b742c35fab6ac418138ce500f26e692abf095c95cfcfb289fc483f87d8fc71cc564d55d525458dae160e3559892d2ecd75163ef4ab52e16425f305cac5cbef8c77b53317bc702e17e1f77b4ecf6d53750309f6d6aabfad7f53026686be99410defdcd3730a09c861a4d777aa11be51694238ca458bb21cb8c587aa6b5412b6c69ca0f4c5e18cfec2b6fcefb1bd17d8eb2c3e8197f7f545fab6f8c031c66c28f334af905a5c5bf9cb1f31d73e413dd80fe854497474f09c7e3c9e88631c1684dc283b2ec2ebf487c8248e2b37582036784d9062e23e5bab6c0b0d01612be87527bbec6a36aefb9a0b4e838bac3376c05a6b99650425070f9511f487b2dcbb8397121e537f4d224f655ce718b13859d587aece0317b335f6d9db4825870897ec0c036c7ca0407c5fb088218753f62f6c6deb20bf9daca2238f655b5045ac771d6b6082438f2b101ed8cf41ff169e9f531ad8812f1718d9a5700eabb118ed5477737acce88449f03e03057fb2d8198b7af5b83e8c817754ccf7ec2efaa94b95a08a22fc9b73bd678478a553b6ed85a7a651bf242f15e7f264bc515bf35a3886b1c9ce429f69e176c37a12b7f32d6f13159cb41ebc42632c9a48dd509694748a0a00c061d27a66a6bd957005b83ab83ab2f9f19186660ffc0287dbde826d671905a05555b5a7c6fd76dcae15dde8ee8931573299406f3e35aec097b22eb652c08192b8e0c56db0feda69e627b4ab7a4abd58219919bf58ce6e6f8c3636130c0c10dd1359e5c40506b55fee703ff04a5d04d6521eb3888105c743a58cbfe676a8b7f224b92a7983dc8f1fe678b6cf8b80c7a0e5ac2f8a63b90620e8bd6e7a8f57e21a6d9bd0ca81dce1c90ce3bcb387567f267cc752b8440c7a3a5b34f79bd49b47c1331e03a1d6f4f2e306118873d67a53159051e146c69edbaa6bbb2e7cb965241e06e23beb96060a56b3ccaac2c78c0bb4c3b5193a198ee6168c893eb1c6b01105698781b64c3b8e4f10450aa852d5e34c399ab75e3c735f732d1a711c5d7ef15f9ae65767e2feceb984cb803f75400421dee6edadad0ce83dd57e479445178c65f6c2e3acbb2800ce027ee06fe43ad079f702654a5e4d7d17087e9ac0c1ff26e583505c05b3e09692edb76d9e3342845e6d863c241fb072b05cefd15be8bf74c0c2bc5562842b0105c73138f36d36f3139b99bd4f70936191047e3b838b0f27d9cf492b6caca31e6307f17e96c454df80d870b3940078b6bd01327ac55b63527282f967a324a3bd025bd298fdbb30f922f1f2bbb053fa84683e665724eae3e5c397e3e10c66e567aafc6ac1bd1c1c8ff", 0x1000}, {&(0x7f0000000100)="954b53b86190274e588273eff7681bc39532a5791eb864f61583d31a5d933e619091b19236a6e0afe464df3500638d50e64c5b0ec04d6e407f6b3f3c0b073ca0c3f6a57bb10158815c8b63709c2746e50cf2460870ae5c89bb6a76aa44074a30", 0x60}, {&(0x7f0000000200)="560de1e991354e9ee3b90dbd98ccbe11be2fd2cc0a9430b84e9187719b66c01b67862616024d4b738e2d9b4233df321968d20c62ac8cfe51a06a75a032b839822fba8b7f5e79bc3fed9bc0450f77e4e5afd57c8b919a5ce38574972d908743b1b02aa994e047a92d521f2dace44b8aab5d8953d3122b5125049b4914681f8a8ebe7528f1bb91f9663232ddc1c7c3f9cd30a6ad0e52", 0x95}, {&(0x7f00000002c0)="294db6fc76e44c56d0650685ae541150e36ed9880009b3196f4930cbf286cee96657c4dd4648d5fa481ed208ddb35e38502e8f73797effe0dfc398be68ec4b09108f0682a2bc4f3a16b57bff550b15be811d792bfa5924564ae6ed", 0x5b}, {&(0x7f0000000340)="d44b1fbcd879da87a5e0a871394147a5266c8600dd806695182479481231941662add3a653b8337b93f408f00079ddcf6c1fcd4840ece71995ac07ffd2df1afaa14bb6ab1c091d0db0009d4529f1dcf1dd761700d7a4dbfe6bb98e10e17a865cbc69468d0be699b55cbbb6205c66389db94e51dea99ceeebc64c1adf06206dc37bd17339f7916f254691d7625751e8d1b7497110c70e6a90623b9f1ae83b80f26569986ceb7996becc30e740ee91", 0xae}, {&(0x7f0000002f40)="1ed8c54148b241af7e3c00e51d6f1a995f48f1f6e4c140113e853f5c5777473d04118e875b58789311ca6edbfc98b9676eca804eba2f7ebea82663a9fe31b79b8a654a0e4493682ba6b5c57c281b27cdddbe4b10dac046acddb8da0d3c248721c44387d79c0f0d2c1fff61d52f57cb7941ca193f3e10f746ab5b2029c116f8f598ae3734a39e80d7a2b4555f41f8490fa82ad485e0b0debe105e0857543ba65d11e8ddf201160f53b8714ba2b2ad476887ba1e4b08fa4793c2c770fa73afd4fb9f23534aa3b357c61bea89ec67fa685508e0d84f4403ae062dd341f6086db9370aff0e7b2a71a13eaf64e4c504dde62258b4e6b1f9c6a31291f62b9a47b43c31520458b1fbf17aa37c0564cc7f2b236e95926ff3d1d0f6f260a9e695c5651848ec7e769dda2f4cec6ec7d9136f83c96c419f5aa3ef7be3075186f260978d91209aa0a842157e284cee4fd472fb5d5d12c4d71c468429dfbefb0bbb4b2a7c2c77b04c97d410e4735f1c26e8a6ffc2f270871c08641ee4e507753ed169b3e3b503c96f598db8bd10d8266ef4df91ad62020627b4b9d660eebbed573055b54d0e0790c5a4ff8039d53409f74bd35c0310f17ccec056cc88bceffb2aaa8de958d3b4ef88979fb19d126c0d0ad9a18f891282cf46760c7e1f464bcf0beb02ca366688225020c5375e985b0d2da62010030e04edb61c18983821a1dcf48dd5a2f5ba5d3a588b8b8cf7315da1a1d7a520a371a677e0103f4ab04d365a9c62ca041de572bf733c0ce2bc96430d3faf060389e1eabc2576080d0076dec3d11f2afc403b13de5266680d7fdd1fa76c6f2ee089f2fbb8068c22d8d34b58332f3d6639866c7bea8a1965f9c6d95efbfcf0d9ba45168cc0a1427b9651f5b2e55c83401e47fff68216a363bd9677f6d1e41acd026d4b24ce4abe13bd377bb8ff8918f2114848ec685136f94d3e8b9470b3d35870dc1aebc6dcd67fc0c6e6b2ede30488f8e325d43504a55c65d9b5dbee5c00dae4b5d2147e09c7d6b0a9e4bec72d339ab8887fab30067a1aabfef6e800246a2cfb13460fb3f7d60075151da9b91684fb5cb66020edcba81d2ea78bda1327974082ea5e421759a49485d48bf324119b4a55f59f10c9ca2bb4f2a2766821e389c9c56c73ed5298c2800f90c3c4174e36b873bcc1ebeacba1a179ae3e2542a7972307e36393c8c503602fb1926e15d206b6e31dba45ff11b887145377c75d98fbbd915cf4010e5a7eea36f0b83907e191b63fd38e020b373f1daae23d6479be6ff2c3e8b34196ddb993dea19ec97cc444b15b948de5c4778cd392e5836a07d4fc144f6e5a0dc38598ba232cfd879f2cfefed59d54ca385db0e763342602d9d58a044aea54adf03d69c3414be12b19c0c6b3be9ab89c84d7968094c0810b2dbc0dc5481a8a85d3e5c0507a99b9e44031791f790a1bd6d557f7563a4a4a26a105e9e1fe6ca8ddeeae2175a6eb978704beb58199569e4dcaaff85531984098fefeb32ad468776e5640d6a9d339ee46740ce653002cf5953e725dfadea8ebd1f1bd6e46bb82c0afa206e339d99b501a1acf7d3a19c1409dec54509057610e3310ed77265a54c4322510510338618ad164c06200da77cfb4754a6660a7cd33c679b7e7944021be4a27813f4c1d20c1003598e96b33fffb9293fc46c712bbc04535ecf3253b4d8f45ec519a64a7dd3db799453a359abce94598dceb9281fc8bf9839006b943eb29156b7ad9473859e60b5f5c15a84b4ae1d6c394a0265ab941b30f338ec82009be86e642eb54b71079819445ae1e0d9106f3d709df0d8f062d2a97138aeafc93f5e1b3abd7b71c21fd370aa58de1c42440dde1930b874f5cc685e305999a366b6b1c569186a8ff165608c632986bb25313a874d15a81a8ca22ee6adf39e266463ba88d1573d30ffb52a5e776b9cbfd1ca2ae7a4b2412e165766342b1100024770358f690e8d564e3543344ac37cd1bf9648dfc50c444a5afcaabb4ee89276d4d65214c38ca76f16b914b14af6f5b50010da816c923b9fa5c4603a8cdbbf04e9692c357975d7578a52ad5183ca2d642f6938f56a4d9aeb81ea59b509502cc928fbef79f16c721823a3693da1546468cd1ed344dab97842976bd5fcace4fd990ff8c77b37d277fc7f982bd7753e5e95caeee83fe72167d393b7a80559159fe8c689eca786fc4023a8d8dcd5696115f87515e2d3f64933beb4224d60c94aad8cc19d1311a4a574cd23087e046aab85735ef08f0f3ed121a69812184c4d3f7e1853dd9e68e3422d51b62ae6220e4ffb3ec821d1000846bad1d5922f3aad157b837a6f9905c9cc0cbfd78ec7a22f832a956c2c4ce07efe6196da57b5331f8d70c359368bbcdd3fa987d93f53fb89b41895362e3a494a932a91edd3c830983f52add11b1afaffa02fd544a7760d32507d5b28f347f17a728b5d687d83bc29062fd2b0728b99fa8a7111042ef095cb295dd436143334105776feeb600af4ac2aa87674a1c15b68cf8b5a4eb76f3f8b33a82d88c911f74f9453a3b883eb8aa6b782037ebf3dbd598d7bd5a77f313c58fc6f4bb76ad37a7630145ffc586115d5d4f554bb166caa818abcc94d14e8333223df622aeef94c5bb71b20614e39613d472d961f376ee32de41c92ae202b6ca73f205728c30b0ef6d41b1db488c4675aacffc47e163d1bcd73c87cf1b902c9837b31cdc7883db2467231028c4fed080bb926915c2de1a608e97e630c4ad4185ca638a5f493bdc8c2755a2629f82601ff27da8d08f0a71b9077c41a5708224f9c24ef34780bf2bfad40ce362caaeb911e3262b4cb5e72b10007c8d982bbb1de7fa5d7ef68f94250a64ec4dc1daeda4f7e5da022ba883906c0c7c68da8001145eba1efa8974f332ded945f211ebee1fc0b4a489196b50e8b7d26fbddf665d57f44c41bb17cb7a4a7faf468fdbff1343a9c85b5884796e4c4e6e85847f35586126a4a3db2638e5b375409cd5425131195282fbcdf5ae25a312ed3b39ab89d15beaf8becf874f777461495c7a05a563574724727e6d1156a920b3707b3f6916e3dc870a564da60fa335501228caf3f19dc1430f7f35ada99e267cb4f641afa4447a3812c7581db2d20772a90167514872157dace9c8392fc911affc71041101a2451fa5692aeda00af524b59a9bc7632cf5507b859941111bc7bba00a5c4e45d0b2448d7cee1184ef1af719e932137fec15bf0693125f4b62f904fd69e0b61aa53f396f2e650e4c17399eb69a4617030a9754e5fc0c3a24a32ce1d79a3d884bc245c78956184eea6890df874645b7a11fe7574a6cc23f841af227c056d2ca096ff63ea59fbac7adb052c5dd743a7fe4a324d02b0a26424e9c406ef541c0b94429cd8d05d45a87ce9a9d572876c1ea427cc76319f6ba7b2b4d0c3806b6f2f9b929e70d182df51a48fd0d21f96f41c57a73402bdc5508b470b8bce11ca6fa187625bffe39322d25426f5a982eba0a2546b819ec1273bbce0be5b1493cd4e3690712e507821f75f8e91f375360d8b99057774c141bed4b8ebe5ce232ac84b52cf4fc63a96c57fe1d1c3683ebccc8ce5a1ec58b44aea23fcc2ce47db2dd4aaee05504b7794a66dc4d3bd88a4ea6600963163998bce13fbe6f7f061fb6e05c0bc83bfccde6482c7dcc651f7739c53964ec425da56bf3d50c0079fb680c6c1f7200d5891a44d641fc57658e7fde748231bf6f0155d141d0473d5719bdce2eb7f43c94435d43cbb57f19752d768661072cafd804dd71161f3faa70856c0d1507dc1f4136c9081f31c135c6aafc53c8e1b5053d62f143669ca76367966b92a678a49a27a118e407028eee68e6f959b75ef82b31c9a8bbcc2fe153c9545d95d2da44dc8030b0d8bb9ac333426c2e0dc4427946c14f375886f030cca209d3a7cfa041cf7433fe566b69935b31f4acf45a7678a7c9b53f7328a204a8bb43b337e10d78739f99fe9e0c06bff19f335627b3449bf6526b826363129f0c174d8787bfab710a055b593e250b2d5e7a752ad4517b246ff4314c486ce16d8ee82dda18432188a9bdf4a233e8e1e790ef93f282f69e33f1edea4820d8e8a048ba5e927c4854384b65ae3ac400a6df945491b8736974cff7472c97423fd8efa3bca10e4d209e8f78711dcc66c72f6d29130064f3535abf7d3f288e1375e2714650b8d1bda99aacbf7533a097e220645414b95c4907e0f8893d4b7244ef2e45dc8aa854ef9a78173c54fe56ae8f26b6afee66ac850c94c486584794cace7616ef804fa535c4b63b326fa95d4f867b0a79c9af2bcc171066bc43b55fdbac731d0414edd6c99b558eefcd89b479a556c7471816dce1f2ec32be2bb8851012c7d5cad7517d92fb96aea30938720482d80b892b4ea0e85f793cc9825270742b7199ecba5ca8d65907a8186b58dab99f6afe89c56b18a6e1127ba76f493950d527ae13746d46cfcca47f88f6a5649387b435db2044ad39dc51b84f85fd6a1b04be165f9a734798cf743d0af41512df6ebca455c234dbd386848bd1d51789c03cd430e7257b0dd113c55b9407596d64547239d6d4cf97453fdb591bc0ca04e2682a5dbc6dd1888a01fb1d8ccd9b8f3df96e48bb09012eb5f6c727f04132706ccdced127355b74c28de8b305bc2150b3fc90acdc997ca26d177abc789461ecc3ec2ddf72103542d145bbab8d5e5c9967de3a6186ea0d468d279380c0b8754480a886aa909c75acaebc36c9b3efdc9041abd6fb1837055f41d574dd70f24191f9f4b3a5ad93fff67088a149b0fd81a9dbdebfcccbe16751034cd2ae71ceabcb035ba412bacd78a2fab459851a406de7455694184e47cb94f914689bd1f37809c7a527c04d29a8cc6de44e5cbdabde3b9027321c90d5c5489914f3e4313c415d7ec1db4b8c829d4d1ff40f2e48c6774a71a12364207a17fd037046b6497f5079454cf4bbf435674be09a7827bfcafb8e048847bfb24d2544f2ffd0f364b865dece16e912055d184e4f548540990e0e99379c3bf8e427994fc71d4c66f22e4b34c6956dd6fc956b394c07c33931ac35f8cfe45081f32c6c7f49b23d45e9d9d0a088952416ec2e3ffce1053fd0d5bf0e23d4a75f3699f748fbb84280bc22fb84a75fb7c1c57b67dc3a23f810a64d194f901775ff2d6e5dbfcb0d80ee5e8d655c5c554ffbc3e0b9b730ed58dbc17cfb8325705923eb2ad1aa5a94e6e618b1d3c57efa0d2b5ff09fc45e9090c20ba50a667c8ca0b0b0ec9cc9902be72117de0f1c536701c01ed6ed7d9ca2a0bc0c4f8a17fbfde8c06510f89a442e316fb69d91ffc81f985037d98dc0e7caa8efcfaceee3e301f982d0dc38e2a1283152c8adbd341693c39ea75a2595be14663cdbe879cb454c8bba3ed53938ebd5d4df5715b197ced50bcc221d5f356b628d78e16d4b9baf8939cf43abcb2cb1792761dffafbb01760fa410defc5b4f78045d0ca1284680e99f7dddf20ed5df4f3a92d3011072f7bf1a278866bf46b0a88a0f68679434c37a3f0639e5ff70a4a519db4883bae06137d4454713da4a09110c92c7cbce9ffc43a8fb082aeee00445881d89c79f14003cdf704b487a07d5816cbaf9a088d630729d1084396f5fe0633046d32fde69b60713f455e44eb923919cd31d1145fb9f73127cd8b003e3e81e9744e2edbfb551a57a2fb7b33889b94f887b78af60b79441eb4b19e7ea522bafb3244c1c325f7ab8828bacff984055086778e10748bf9c43ec5df2f7c1f6e2ed3084a6e1729d7490628d647c0728657dfe402281d8dfb0970f970ec9d355d", 0x1000}, {&(0x7f0000003f40)="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", 0x1000}], 0x7, &(0x7f0000000480)={0xc8, 0x107, 0x0, "602c3964b6e04675ccfb5d324384bceed26f0eb3ad01460d11b843c6cef663f156c53041322a76d2eb6869c7c5de900307a01c065dc4a8884f334f03f55653b9e36ddb3b6114197a7377332f8a860b8051fb7be32399feb6b42bf354d81dafea7e231e09b43bcba1a04ac3e9c9146148bfa632a5ae71825f8b28ecfeb277c3fd675dfad57ed30d85b6e653840c2127792b787119d67538f72b21f6fc0a2daecbdcffc2261e04624c1e61b5d0f29497a53a4c0f4e9e1d4bd7"}, 0xc8, 0x8000}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000007ec0)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000bc0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f00000010c0)=0x918, 0x4) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000040)={0x7, 'vxcan1\x00', {0x6}, 0x7fff}) sendmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x1ce, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) 17:52:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8478071") pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x5}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x104, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf914}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004890}, 0x40) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500670000040000000077000000421ba3a20400ff7e280000001100ffffba16a004000000000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 17:52:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100408be31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000050e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3031.574070][ T6640] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3032.212874][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110013c0e31d00000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3032.676183][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) unshare(0x40000000) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = openat$cgroup_ro(r0, &(0x7f0000000c80)='cpu.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r9, &(0x7f0000000d00)="8d832bfd386f76a68b5b6bf5d4a3f2bf0ace5704551d88e5b57f5ae112f22ecbf5ef8fa588c166952f8f17169e30d7f18d2483144ef6b1f7acf425222f8c2ebe0f9010e686f9578e2fc1818f3ca66461db2d42d06d0e573168a6ba24520b0c459a5a28395e1a2fb54127ff748fbb8ce8455e98c020595b59676d95892c4cb5ad457d0db3846567a5dfdc09da0bfaff8dee69fc1a057782bc9b9dda918302f8b1ad2e30b76502af7a9709ed174c2981322bc0988527a28ac1ef0cda01dd34a755c63895939842467a1adb7e4c235654ab16b3653ce9f64b9a010bb4c53f81e0ab5c45f0e039268fc9bd2fd14e10e2bfa90122ec686ada2bb41b8166e7bca91b56b9b4e59e6c48ffe5c4b94df2cc6bb94b78e72edd7c3e994ec6a6605502e4a9006c183bc7acbe18f19dbf746e36d796f2b043ce29a480616c255af47f0dc55bbf20ed8dac7e9d511fe7e4d7804aa5ba578ec18aa460d976e1ecc53818297a187a934d2f3aeff1f97575df52ddbf72d69e5ae1f62580d3b4845e95aa0c1a5bbfef5a2cb23702fbf7cf4bd0f201cc4f03ef493353dfc368aa05672e19f82852710a6a5847ad98ccffea92be14ed6a8e3fe0837ef7c674f35b261ee71413069f81095272a56699fb2d65631d41121f32f66702d4a1089392a0dc010b28f64f3a306d8cba190367af9b95f1f173d9348bb08d4b5557d1fe74f428998f8242dfa49617b241cb18622b430c540a5ce0d393d548e94f5b12c4acb476ce9bf2e1dc157dbb3143bbc76152e1cecfb0c56f7c6d48cff3e760eb855228492f7fbe2417fb912e7994ed508b72b4ee19415ddfe7c21bc49717700e4c0f63a17a2701b8a8f53248dababfc213d780023c58ba0dbc1c3a2349eb51845878d6aef4d0c164cfed3ecc8ee9877ee7e668e41375ac483df14d4d13dd40012db4f2a3c370f3228efa0d137f5a1ad9d91af6d9c7e9be569e8cb44c38ad28b4bcf0fe68904de266f977d4da3aabb855e1a3a89d4e1d5ba3ce9287c667eb32c6c0f45494d2f9a76d5ed5e03be51088256dfb3780b80ae633f14ec81fd789d41e7ae96b3632cb83f7dc2d3c5ebb7b0dbdd3adef8b3287a7ce6c60d7c1d74bc7f3bbedec33192e0b39157be89b817ee3f3550a27cf514de8163731c0946e9680a4beacece3da847604f15c19a514e3c79a12151ce67901cdce06d6a4935165fd582bb726d07080281a890318d5797cb6dc564bf4285ac719ce246241aa2f09983b00ad2547a89daebcf1651da73b85b2fd437069746d693ff83c66dfef0f5d132bff48538e3e07f5ba0e98b16d3aa089bf9e7fd3da879bf03ec748519cd409fe7ab34ffce29f0001e7d0b607479a67e818a6b5657348e32aa2d8d0152ebb30d1382896270633f82976ff8d81e1f3192335c1b7c39f65c5fb74bc62c42a6f38ef4b8d17009faed1030f86625833771e366ceb7ad4fef546b9ed861b0dbfdcb24281b12ed40d73469aad6ded692a347db260eee85350505a412b6c0ce2eb7022877686f5e628da7a433751689e4c4e879ae7535a41ded44d5dab90a1e964fa6cb4c50f063eb676fb44ad739cee57d41c7d5f836ec37bdacc61fbad5f4c0124d48f7b880ac2c3c34da8f6e3a21d72edebd0f98ee27bf5f86d0d2a2a3a35108e9c7038506cba99f32c8d56f3cd955983fcad9e9eb4376dcf9ce6dc7c295c4885abafd5ce02204d0189549933f9912c5693cc12513351393b590dbe040bd95132ebec40907d645a430947fa8f169ca41843afb81f917a3b7cdf4166684dda95bf341b50eab45b871059e78a6eca7544858912c96584f1c7886c28a19b3aaf91e09fd3f35ce9e2644cd8adb3645af6476b950823255acc222bceea6840f5b4d11567437255437d2549f8c89f014c48c7fbf948f472bd759f33c1ae3486198775d523a614d1bf9174a958453ad8cc00a4e0082a8773fe91703d1dcab00d4b5ec5a39c10384d6fa1dcaae606777795facd8007c7e485b0da1310ac63e027a3378b096d908fa67bc555796e72fe8643df4af35536834d6d53349ac1fa942d9860e6be8155d856c584a7edf8b670df94fed5c53b870521c32a7b151b5779fc74a4c036efcfccbf777bfad7e916ff2421b215d6e5e930b1faf1d2c3830184616f06ac022b6faf017220b94271994fff19ba153648f4b9d0be8fe2230097afd3c0664a4e8304c519626791c88a54f858a38249f8c8b879a9c25d2a47777a85837a88b1783ccd31b94d60ff1a5545eaf6c2d7a7eb389c052a18e3e3eb456c8501c676b700eb44d60c725d247136d03497df4cff940c8f918ea5be86bb6345cb56e58cdd572289dbb6470c04b7d8cb389d7775924355fdfe21a0c0f237eb12728359816bef077e4dd96cd8b58e54e3b449c6f08513a355e4e9e7599aa3d71a02a070a8dab7a71b45898c24c92fde6e6e311bf035033ce0d84719415f744ef463cf2b9522aa54b60f10e486eec8be113a1b19e792ac07e85daf3b6d7367e41341395a3141b1471e3a9d6b93e5fe50daf552f6c88aa9afca0d6338dfef55294d15785c6240c0e51ec3bbf10b916b789acaa964edbddd1a9656f96b9ba2ead548580431f4b434e50848f60e1ca1338f71099c201fa0f527f4edc33388ddde5bbcad37d05896db068986ba85a0f33cd2cfdb4f770afb4112b4aa5afe3ae59199d86c6f46702d9f6700eb7a700a0a5f6816aa254c2cf7726046af35826937d3a1400c2d52488bf986c852429ec50aeaff8b13bfcb217c6437fcf00b4f0c0c763d896aced13cc5a9b9b726a47a5c02f2e812f2cfa01489e2e12f8e431afc61e7fa8f7cb98fe193d213752d48e9f6eb457ac56bf9c9f8162971383cc0eaf7969a2c9e39de52a5f0003d968ed87491e6e2d9e39a8519a42496e7ca6ca8f0a02da6f9e5078db2dd860bfe8820d2e7e0cce70b992daa7632277b47eb4086e66c21acc2f1963f4d2423acade756cd7465738b01d46c79b647cb9a1e16b942e8e0e0243514d379a3cc21cb64d7f55fe3ecca4e78abbbc7f2e68eded0bf5a444967c3f4d382a29bb6c1597f45d7ce0cc18f026fe592300ff18f69f557e0a9aed89a5281d9ee9925aefea4334092fffc9682848d198c36cf04f934c4968cf26b2582b04f57848dda36832268a90d086268747e42477120491ad0d0d2384b45cc6201176538b369d85b7e6cac6cbde5d5501fb33ab3322cf32e2224e9cf1296cd08dc2dd758ed49c57a35e81da7bf12a9989f86eb7de0e8ffced8b99355218076310e35befcdc830a2ef35bccb22c53f8ccb9d00c156716237de8e0c2ebd6d0391447541bdc6f68594099dc7c3257fb240cd434dfbdfd0cb026e0d12a940a96923be7cc579f420ec7abf8f812b859b325d5cdde30fe2b66c9412d75d195713a2e3ed342f49c8d23172932a773fd937b4b50dbd33b8e9e2b0689739f73169bd139a8647ad8b83e966104a6c44efe9fd7b7ca79cee2f3e38bba454ef3cc282d5533847360e049c6c407279ad53a4e1d46770b19be831e32d404e532c4341d5368079d4e05181bb3e066b9477038d224c6b6d66d60807ce3d9b50452f0cdf21bf3683f87f3557ac05f7e3cb91cabb12154359312c62d626cac14e6f79a1f1997ca61b5a416c374e8afb93b9381724b7bc6fad334011ed0eeab241fb7d63dfb40706ef42da1ca9b9220a60411baf437191fb930ff8ccee14768325156c24eb46e17e61ca36e607ef6db5f5616e00ec123e30a2421c9a63b39c8276bcf8ee0dc2401a3c60374d71606b819a6c738735ab644220e0bbb4d8dc9379a4a51aeee5e3d1961b77187962d25dd792bac1f4c5a6c69459e1bef7cad25b74da9cf40e364b8e2bf98aa9d04f6c65c2e86661a57a31e8c39204fc2d88b058eb6edb579a5faa86290dfcf0d9105c0ce8ac63eb1090ceb602a96a0bdeaaa4bc3d1f5233dc7187cd29e5128ee396f150887b4a985315ff11889eac4150ce2b18f6478707eb238a38c7ab744621eb2ef46e297085f432d22fa33d534e75d359431c98a0c66babd914728fbeb9a39d239c606a28b6342fae116c08ea86854fcc8854fc829fa8906cee728955dd7e5bc2a0ce3683a73690dc617b086a38eec4166f6a9370faa3530419a151959e0c582bf44f61ac79b410d301dcd5d960f893e2c293601878a244a2aef5869622797bcf623773326cde0465a622635ec51459339d50459fcd7b457f0ffa42d6b738fbebbec6245a1e2f93c18deb88c76db9c2f5c909e5bfc38b0c9de4ccb0c62435e66af1db7e99429763875f3b26bb30b9c3030c657fe65b1c8a5dd24088e1179752841adc877ba713b67ef349d171f0ae21dfad04dd5a876ae5eb4259cfd4ba45ed3a6b9b7fe4eabccd07f1b979375c8805086f42b145b3d7c9695299781db4c031016fbeb11fa4438df84471e965c6b161cabefcb589358555eed4a564882fee2145c47c209e5d5abab5b037b3b5c8b3951683ef3da025a8c01d828cd559c6603d4f020313db982f5b1f63b6d491a77b0b42de363adf10497817d9e11fbfe60ab1b5fd22e48bc7bc23e6ae32058f63108de252975cef674824e5e407ec9a44dcf3c6e982c1b390b98d83afb23c6f711aec987e35732d482be1d3dbba4bb004ef1a2e8753765937092660d005ad7c8b0d1289e4a6709978388b452d7ab24f34938c10daaf2041db20c340f23c3237e8d269be08f5697b89dd6f44aaecc47b52400a9792857b4f0ff1accebee45ebbf243063625ca66d78f4a574320ffa67a107cd401e11ba6ac6654968f6bfc0383fc5f64ed4e8f10e4ec25cb4b22299468496da2c2532a375dec4b8477777341a5e8fe094a4c0c03387980d4f37d5bbbf9d7a3d29984bd6fc3a4587aefb0bfe013dfa9c9806baab3da3734086f81f3758e3534aea7b3486ef1134fe79983e2dba63525d73a1af9b58424682902592797e2fdbed32ea0891af41608149660ec72158908e363218d03bc56e3cd9724f147ca6bd936d0d7dfe1ece158fef3a0b183acb8a8c1dcc1e77bef0b8bbbc566669bdfe5f6cc74b167e8dd778cae216780d987638dc72971203eedcd209fc33b3502e970d4ce28743d4f879b1d9efd2023b432351535d39178453eca1c8f818b6fba82e1e8ae0801a463b96ee2d1b68e57bad723e37fe07760f1f1c8e0b278dfe4ed1b1b5ee38fb9c5fab808a2a4ce94f3ab85167b3d5fc72084bec8c226d6c137480bebc62864d5bbf0ede53688c6acf6931871dcbc41dc4603239b7db1dd8938dd94d400ab293f1cba681db52c4ce17b594c4fa70f5d9478d19486792ecc3ee87afb94667b9ba64b8802deef1dd94a0ced609692c5671dee39309ce615972336464885b657f57635589bebb1f3215df992ef45771c151702bef2365970d8e4c06169b76a6ecf0fb66343ab2f625a076be5fee063e92f1c0e4740159c628239442b2e545744b0ac32d3cfa74aa44f8577a474045d6d3c5de76a97a38cf17aa76be3b9114f43bd2707d18c47e07d6f8738dc358ff46292ae723ddbf1ea27ff314096ff7aaff45a8f97b2dd228c31a4a5022cc5fd850cfc752341849577e74fbb597efdc52102dfe5327f84b06590e5bb2ff33a4ef20c4e3f4c8370384c89b9c65360a39555eead5d82e2797831fd1dd98cccc9f448edf9a85001a68de9004e6675e3a2a9e2695277dbd6cde00ae0963f808e53e99da0b7a7a9740183b3e29b24f606b514693c5a148da1dd8907d5d657035a15e24f36b3a02a1f8fcfe4218524d377d823e41edf6d7603c2322df2f4cbb076969f8ea489c8b53a97abc", 0x1000, 0x81, &(0x7f00000003c0)={0xa, 0x4e20, 0x2, @rand_addr="dbfff2aa364e1c940cd32104d3b2e451", 0x6}, 0x1c) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bind$xdp(r1, &(0x7f0000000cc0)={0x2c, 0x0, r3, 0x24, r4}, 0x10) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @multicast1, @local}, 0xc) r13 = socket(0x10, 0x80002, 0x0) ioctl(r13, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r13, 0x400c6615, &(0x7f0000000280)={0x0, @aes128}) setsockopt$inet_int(r12, 0x0, 0xca, &(0x7f0000000000), 0x10) r14 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) sendfile(r14, r14, &(0x7f0000000000)=0x6, 0x4) 17:52:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r2 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r3, r4, 0xc}, 0x10) close(r2) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r7, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x38, 0xac9, 0x200, 0x5, 0x3, 0x100, 0xf4a1, 0xffffffab, r7}, &(0x7f0000000100)=0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="080db5055e0bcfe8698071") r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) sendfile(r10, r8, 0x0, 0x100000001) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) r12 = socket(0x2, 0x6, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") sendmmsg$inet(r12, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="2f8f81e2f107e02db8910d8b31e220d301711c957eaac80258796c208c01425d6aac67cab4be45f4420de326e7baa88e24d1df47117a9f16e50d4aff5180789a2b13bfdd87cc4b6b3175249c", 0x4c}, {&(0x7f0000000300)="ec37cb6cc3ed969276a66e3dd7b5939ca89bf934e1e64fea2c0ddd3bbdfcf88906b3ecbab04326017ffa92657fa6efda6579c7d6c0711f4a79db49243abb391907f053ea7467d086c51c14b7", 0x4c}, {&(0x7f0000000380)="41af70309b2aa2cc53c89a33d00cfd7815980ec72e8151f4c132d7505e683db54235071f2f987c0694ddf80ce45caceb0622f86bdd4ffb930e2da561a97621229173d3b983ec0bc65af6b1db8b1ee0fe40cf8c9c66369eae3c18d14e266ceec2afab80050e602f7156f03a4ddfe5fce1057e1e395811", 0x76}, {&(0x7f0000000400)="b4de3385d365b6382946d800c43b7272142d4e712a1e5d3bfd5a1facb5e7cae76c4d014f210fcdd34735a82347c391801a236bdbec591a8a7ac08758c331f8fd771db63c0dd6181c357ccb6ffa7586a8f473bb13c11d04238f705ac3b60266d8ace2a70b33b459fc4fa9a947e6737a7c84ffe4347ee86363793a86134d07dd1c7391fd6dc852267933415a2c58e98e61c721aad7aab677b73e6d5651e7816e9352add00c32f55897eafc43b00c9cf33a27f474a62b93b3fdee0c5c96aadf696cdd170b5fa3b251f15c02a112207f6d0b9db7f239030c23097c8613ac5ccf64b55522b83a20c2c9fc259bb7d1b0a9732c", 0xf0}, {&(0x7f0000000500)="29cb704d4723836753acb60bb8fb6064fa90b3ffc3a4a588e00b884e2c8eb872e7854a1b351fc57673299cf9aa02d39b8f3cdde8b93ce452a5670159f00c2b2d8789e525a610f6b1994dc5920745a5250c2870e167ba09416a4aca1226b5082b426deff6eb1ea69861eea53e89006de0dc9fc35f618d3bd8257774485a1bb9c5cdf3ee5de8212188f15961129062914ae486ff60fe8f8dfa649a1a5248", 0x9d}, {&(0x7f00000005c0)="9a35599e13b1ffae1d1aee7b0508355f818c3d53205337a13837376b9aa030e98e092a7e5e4ad6b7f3f4329e7234ba59f44d1a6d1876b6e31d07c92ae348263b461addcb59e1afed167af0053227b26f2526794dd379ad223d4f29232d4f89f3c43899d8620aedca3922a56ba503cccd056780b2824e43b200d0b24ae9b00745c0a67cb922bc1082d8db9e967bd1f062e809a7dc8f09d849627eeff6f05cde5fb9703b1eb846d84a8844163e71c25a519a764b95d0", 0xb5}], 0x6, &(0x7f0000000700)=[@ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x22, 0x2, [{0x1, 0xe, "6153b1a1bac604e98efea724"}, {0x4, 0xe, "fe5dbcace88d0c425bb4a81d"}]}, @timestamp={0x44, 0xc, 0x1b, 0x0, 0x8, [0x0, 0x65]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb2, [@empty, @loopback, @multicast1, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x78, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}], 0x80}}], 0x1, 0x801) write$cgroup_int(r11, &(0x7f0000000080), 0x87f1a7) [ 3032.853630][ T6667] IPVS: ftp: loaded support on port[0] = 21 [ 3033.179529][ T27] audit: type=1804 audit(1581616337.182:357): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4189/cgroup.controllers" dev="sda1" ino=17125 res=1 17:52:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000070e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3033.236394][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3033.261067][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3033.270422][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3033.632966][ T6667] IPVS: ftp: loaded support on port[0] = 21 17:52:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@dev, r12}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8880) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), 0x4) [ 3033.963815][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3033.973419][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3033.983316][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3033.999362][ T6686] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@dev, r12}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r14 = socket$inet_udp(0x2, 0x2, 0x0) close(r14) splice(r13, 0x0, r14, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8880) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), 0x4) 17:52:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000080e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d00000000000100000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x1, 0x5, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000003c0)=0x4) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x30}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev, r5}, 0x14) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x96a, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x30000000, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40081}, 0x4044801) r6 = socket(0x2, 0x6, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000040)={@multicast1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x3f}, @in6={0xa, 0x4e23, 0x8000, @mcast1, 0xc59e}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x8}, @in6={0xa, 0x4e23, 0x80, @loopback, 0xb}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x743, @rand_addr="b7f7dde36b96c88bc0c8d5660a94db32", 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}], 0xcc) [ 3035.001509][ T66] tipc: TX() has been purged, node left! [ 3035.015291][ T66] tipc: TX() has been purged, node left! 17:52:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:21 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600400001000200000094060434cf6efb8000a007a290457f0189b316277ce06bbace6617cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf639cb9dbcdcc6b4c1f215ce3bb9ad809d5e1cace81ed0be0b42affcbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000", 0xd8}], 0x1}, 0x0) r0 = socket(0x10, 0x802, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4e, &(0x7f0000000040), 0x1}, 0x0) 17:52:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:21 executing program 0: r0 = socket(0x10, 0x80002, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x62, @rand_addr=0x7, 0x4e24, 0x2, 'none\x00', 0x4, 0x400, 0x62}, 0x2c) bind$l2tp6(r0, &(0x7f0000000600)={0xa, 0x0, 0x7, @empty, 0x6, 0x1}, 0x20) r4 = socket(0x10, 0x803, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000640)={0x3}, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0daeee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a6ffffff7f3ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="840000002c000135008000000000000000000a3ca7a3c0e152b930ff0f0000", @ANYRES32=r5, @ANYBLOB="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"], 0x84}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r7 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_buf(r7, 0x84, 0x7b, &(0x7f0000dcffe8)=""/24, &(0x7f00000000c0)=0x69) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000000c80)={0x8, 'veth0_virt_wifi\x00', {'macvtap0\x00'}}) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000580), &(0x7f00000005c0)=0x4) 17:52:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000000000000c0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d02000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3037.109762][ T6762] IPVS: set_ctl: invalid protocol: 98 0.0.0.7:20004 [ 3037.171430][ T6768] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3037.403052][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3037.414439][ T6771] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x2, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) recvmsg$kcm(r2, &(0x7f0000001440)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/127, 0x7f}, {&(0x7f0000001300)=""/246, 0xf6}], 0x3, &(0x7f0000001400)=""/34, 0x22}, 0x10040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev, r9}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001480)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000001580)=0xe8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket(0x11, 0x800000003, 0x0) bind(r13, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r13, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000000)={@dev, r14}, 0x14) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = socket(0x11, 0x800000003, 0x0) bind(r15, &(0x7f0000000080)=@generic={0xb, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0xffffffffffffffa6) getsockname$packet(r16, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r15, 0x29, 0x1b, &(0x7f0000000000)={@dev, r17}, 0x14) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = socket(0x11, 0x800000003, 0x0) bind(r19, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r19, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r18, 0x29, 0x1b, &(0x7f0000000000)={@dev, r20}, 0x14) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) r22 = socket(0x11, 0x800000003, 0x0) bind(r22, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r22, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r21, 0x29, 0x1b, &(0x7f0000000000)={@dev, r23}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', r23}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r25, &(0x7f0000000000)=ANY=[], 0xfffffecc) accept$packet(r25, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001680)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000016c0)={@empty, 0x0}, &(0x7f0000001700)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r29 = socket$inet_udp(0x2, 0x2, 0x0) close(r29) splice(r28, 0x0, r29, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r28, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a00)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000001b00)=0xe8) r32 = socket$inet6_tcp(0xa, 0x1, 0x0) r33 = socket(0x11, 0x800000003, 0x0) bind(r33, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r33, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r32, 0x29, 0x1b, &(0x7f0000000000)={@dev, r34}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800810c0}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a8, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r24}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r26}]}, @ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r27}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r30}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r31}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r34}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000090}, 0x44080) writev(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f0000000000)="390000001300094700bb65e1c3e4ffff0600000005000000450000002500000019002100", 0x24}], 0x1) r35 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r35, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 3037.841509][ T6762] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:21 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "27534ceaa1fdebf3", "1118364bc3ebc744164d295c20b10380769f6600", "f719df69", "3cbddf02ee9e4b6c"}, 0x38) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x6, 0x20) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_per_queue_op={0x4b, 0xf, [0xffff000, 0x80000001, 0x6, 0x7, 0x5, 0x10001, 0x3ff, 0x10001, 0x0, 0x1, 0xa4, 0x8001, 0x1, 0x7, 0x0, 0x3, 0x5, 0x5, 0x6, 0x8, 0x3d8, 0x401, 0x1, 0x4, 0x200, 0xb23, 0x3, 0xdc0, 0xbe, 0x711, 0xf2fe, 0x3, 0x6, 0x8f, 0xfffffffb, 0x1ff, 0x1, 0x5, 0x101, 0x1, 0x3, 0x5, 0x2, 0x6, 0x8000, 0x173548ca, 0x4, 0x7, 0x1, 0x3, 0xfffffffc, 0x6, 0x4, 0x7, 0x7, 0x5be0d44b, 0x0, 0x800, 0x1, 0x4, 0x1, 0x8, 0x8, 0x3ff, 0x10000, 0x800, 0x80, 0x3, 0x1, 0x8, 0x40, 0x5, 0x80000001, 0x30df, 0x8001, 0x7, 0x1a, 0xc8b5, 0x5, 0x81, 0x7fff, 0x8, 0x2df, 0x0, 0x3ff, 0x3ff, 0x7ff, 0x2, 0x5, 0x1000000, 0x100, 0x100, 0x4, 0x3, 0xfe9, 0xfffffffc, 0x7, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x4, 0x2, 0x0, 0x1, 0x57, 0x80, 0x5e, 0x80000001, 0x1ff, 0x6, 0x401, 0x40000, 0x9, 0x81, 0x6074, 0x8, 0x1, 0x10001, 0x40, 0x7c, 0x4, 0x7160114, 0x56, 0xfffffeff, 0x1000, 0x3], "fba69127372782e93a1f0e0cc5a6adad548763e2bd0414d248778680df7651e43e86adec52dd13"}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r6, &(0x7f00000001c0)='T', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080), 0x4) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r6, 0x0, 0x8}) [ 3037.974917][ T6786] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 3037.997344][ T6786] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 3038.016774][ T27] audit: type=1804 audit(1581616342.022:358): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4194/memory.events" dev="sda1" ino=16721 res=1 [ 3038.043537][ T27] audit: type=1800 audit(1581616342.022:359): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=16721 res=0 [ 3038.065082][ T27] audit: type=1804 audit(1581616342.022:360): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir195317082/syzkaller.CLjlDe/4194/memory.events" dev="sda1" ino=16721 res=1 17:52:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}, 'macvtap0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/79) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x8, 0x4) 17:52:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:22 executing program 0: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0xb}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x4, 0x4, 0x100000001}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="f9010000000000000000000000020000"], &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 17:52:22 executing program 0: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0xb}, 0x2c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x9, 0x4, 0x4, 0x100000001}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="f9010000000000000000000000020000"], &(0x7f0000919ff6)='syzkaller\x00', 0x0, 0xe1, &(0x7f0000000000)=""/225}, 0x14) 17:52:22 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@rand_addr="c966e5323bf823486fb05055cc42c1eb", 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x0, 0x80, 0x32, r1, r2}, {0x9, 0x2, 0x100000000, 0x7, 0x600, 0x9, 0xfff, 0x1}, {0x5, 0x5, 0x0, 0x40}, 0x0, 0x6e6bba}, {{@in6=@dev={0xfe, 0x80, [], 0x3d}, 0x4d3, 0x32}, 0x0, @in=@multicast1, 0x3500, 0x3, 0x1, 0x20, 0x7f000000, 0x10001, 0x9}}, 0xe8) getuid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)=""/205, &(0x7f0000000380)=0xcd) socketpair(0x0, 0x800, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000400)={{0x32, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x13, 0x7ff, 0x54}, {@remote, 0x4e24, 0x3, 0x3ff, 0x1, 0x4}}, 0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000580)={0x6, 'bond_slave_0\x00', {0x3}, 0x3}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000005c0)) socketpair(0x27, 0xa, 0x3, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "077124f632"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000780)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x280, r8, 0x301, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc07a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f286a9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xab}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8ccf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x511}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b40)={'vxcan0\x00', r1}) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b80)={0x10001}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0)='nbd\x00') r9 = accept4(r4, &(0x7f0000001240)=@ipx, &(0x7f00000012c0)=0x80, 0x80000) accept4$x25(r9, &(0x7f0000001300)={0x9, @remote}, &(0x7f0000001340)=0x12, 0x80000) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000001380), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000013c0)={0x0, 0x8}, &(0x7f0000001400)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001440)={0x0, 0x2, 0xffffffff, 0x10001, 0x0}, &(0x7f0000001480)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000014c0)={r11, 0xa7c, 0x0, 0x5, 0x643, 0x8, 0x8, 0x7f, {r12, @in={{0x2, 0x4e20, @loopback}}, 0x5, 0x5, 0x0, 0x2, 0x7fff}}, &(0x7f0000001580)=0xb0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001780)={0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x38, r14, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x217}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x40851) 17:52:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d03000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000110e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:23 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000140)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl(r6, 0x0, &(0x7f00000002c0)="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") getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=@ipv4_newaddr={0x30, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8}, @IFA_FLAGS={0x8, 0x8, 0x401}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000012c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001300)=0x28) 17:52:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x20, 0xd48, 0x0, 0x94, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r5, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x45) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004400)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000004500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000004540)={@loopback, r9}, 0x14) sendmsg$unix(r6, &(0x7f0000000100)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)="720db2fd21bed9c0de38a441aef4d24cc2f6ec18de7fea62d18e2debb18494a431e780c27ac4f65a16e434069230585bed962cd26c3b963ca6268035b910ae9b275550ba75e40608e9cfd99bb54a45b1186ddc58ceb024f659c508f2ef9c0eaf1cc7da6b347294c2093f36c9af163d21a6a12902aff6bfae02533974729977e3f770602205356bec30562506e73e95d954d8ee311beec1a2b5edded6fb1b714549fd78d3189bfe2183ae8c8bed088bc607ea9c518ab770a2bc5d61cb13974c728c33cf56d50e93fc6a6fb5bce0498134b533c459f6cff17a6e2d080bf6935286e82f8b3c805c190a7b0978a66d87afbd1a37813fc677", 0xf6}, {&(0x7f00000003c0)="1b49ebc8ad707f3a26bc3b4607b073b27b3cb9139f21a315784ed1acf03bb95e82f5491a735f1cb9e085e4d56b486325b257c5328d349244230b65bddd077f0857118e8cc38bb51d65fcda0a46553ffb6e410213a0a48cd0a752909bc1ef935faf4ef7cd694dced7ec94f8ef3156b28a7b1820bc26d627b58abafaea3952dbcef915928f37ec543a654fd9de5aa853bf2de772e5138956d14ab59a582a9ed0273f855bc75da5c7e18e82f039b5a19f88625bdf76f065436089dac6749d65", 0xbe}], 0x2, 0x0, 0x0, 0x4000}, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000240)={0x3, 'vlan1\x00', {0xfc9b}, 0x8000}) write$cgroup_int(r3, &(0x7f0000000040)=0xc3, 0x12) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x0, r1, 0x1, 0x3, 0x7fffffff}) 17:52:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000200000000000000000000000af4ffffff0000"], &(0x7f00000002c0)=""/4088, 0x3e, 0xff8, 0x1}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r4, 0x3ff, 0x0, 0x100000000, 0x4000000}, &(0x7f0000000180)=0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 17:52:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000000000003f0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d04000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:24 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r0, @ANYBLOB="20002abd7000fedbdf25040000006c0007800c00030003000000000000000c00030002000000000000000c000300070000000000000008000100a7790000080002000000200008000100000000000c00030006000000000000000c0003000200000416274e00080002002d0c6cf516513228ebcff1b4acff0700000c00030000800000000000002c00098008000100070000000800010006000000080001000300000008000100ffffffff080002000600000014000380080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x43, &(0x7f0000000040)=[{0x16, 0xfe, 0x8, 0xfffffffe}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') 17:52:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:25 executing program 0: unshare(0x6c020000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000003a40)="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"/294, 0xffffffffffffff5d, 0x20000000, 0x0, 0xffffff8e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6c1d6000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket(0x2, 0x6, 0x0) r4 = accept4$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80000) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000200)) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl(r3, 0x3, &(0x7f0000000480)="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") r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x9, 0x1191}, 0xffffffffffffff9c) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r8, 0x0, r9, 0x0, 0x4ffe0, 0x0) getsockname(r8, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000600)=0xffffffffffffffad) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x40011) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, 0x0, &(0x7f0000000240)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) splice(r11, 0x0, r12, 0x0, 0x4ffe0, 0x0) getsockname$inet6(r11, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, &(0x7f00000005c0)=0x1c) 17:52:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd28, 0x80000, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "eca44470fda25f70b8c2ab092e9b7ff91c36d615"}, @sadb_ident={0x2, 0x0, 0x100, 0x0, 0x3ff}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_address={0x3, 0x5}]}, 0x68}}, 0x0) [ 3041.162400][ T6900] IPVS: ftp: loaded support on port[0] = 21 17:52:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000000), 0x0}, 0x20) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000006c0)={0x108, 0x0, 0x2, 0x9d8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000002, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000900)) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040), 0x100000001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x8}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f00000008c0)={0x54}) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={0x90, r10, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x90}}, 0x8000) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x37c3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8aa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x41) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @multicast1}, &(0x7f00000002c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x62c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000000400)={0x2, 0xa, 0x14, 0x5}, &(0x7f0000000440)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0xa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000f001c5011372fcff0100000018230000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff85000000550000006a04ffff0000000018280000", @ANYRES32=r7, @ANYBLOB="00d20000000000008500000023000000687a000000000500000006000300000034d92000040000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x96, &(0x7f0000000200)=""/150, 0x0, 0x1, [], r11, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xa, 0xbd, 0x4}, 0x10, r12}, 0x78) [ 3041.368032][ T27] audit: type=1804 audit(1581616345.372:361): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2356/memory.events" dev="sda1" ino=16616 res=1 [ 3041.454706][ T27] audit: type=1800 audit(1581616345.372:362): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16616 res=0 [ 3041.514422][ T27] audit: type=1804 audit(1581616345.372:363): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2356/memory.events" dev="sda1" ino=16616 res=1 17:52:25 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000001bc0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000001c40)=0x80) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4c000) unshare(0x40000000) socketpair(0x27, 0x6, 0x29, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r4, 0x7fffffff}, &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffff9c, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_SIOCSPGRP(r7, 0x8902, 0xfffffffffffffffe) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) [ 3041.581785][ T27] audit: type=1804 audit(1581616345.452:364): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2356/memory.events" dev="sda1" ino=16616 res=1 [ 3041.690024][ T6915] IPVS: ftp: loaded support on port[0] = 21 17:52:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000820e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d05000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000280)={0x34, r1, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x16c, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 17:52:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000280)={0x34, r1, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x16c, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 17:52:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:28 executing program 1: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001dc0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000001ec0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001f00)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e21, 0x1000, 0x4e20, 0x2c7, 0x2, 0xe0, 0xa0, 0x3a, r3, r4}, {0x9, 0x7, 0x3ff, 0x2, 0x16, 0x0, 0x5, 0x3}, {0xfffffffffffffffd, 0x7, 0x50c, 0x8}, 0x4, 0x6e6bbc, 0x0, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3505, 0x4, 0x2, 0x4, 0x1f, 0x1, 0x6}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280000000000000000007468000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="040000000432279e15000001000065780051ec040000000000000000d953be5edd00c75bbd8857b82f68bc8d6fc01561341bb10af21271e00b543f0aca19ed3f6bf321c79323803eff695893d354b7ebacf9ebb6eba4b6c968b8c7250e88212dd47e20c69a66e82d689bd1c4293993c6e401fb5dc1cd5ab4bff2d02d17665b83e868767cc130983f77e3df26207cd40eac9032f13f7068720e93a9acb259408eff5e9a59481d2853a1ecbe32067dcfd05515563f338250855c89f3f935c403c8f8084b79e9fb559bf5b366430d29076d0dfd46d28a62f9dd285acf3cb1a06eca8f6a423b"], 0x34}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r12}}, 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in6=@mcast2}}, {{@in6}}}, &(0x7f0000000340)=0xe8) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) [ 3044.319579][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3044.462746][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3045.726943][ T66] tipc: TX() has been purged, node left! [ 3045.733305][ T66] tipc: TX() has been purged, node left! 17:52:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d06000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000ffffff8d0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d05000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$isdn(r0, &(0x7f00000002c0)={0x2, 0x2, "ee57ca5607eccc7651d23422ea0610027e54c85b981047414cb0a953d81b4a348282dc5767fd71e4449ef167a1765c540e861c42e5e732f3adb7e2b0b228ed6fb0c916d520148396ec614a061cfacdfec820f0a224f9ecff0bd22a657f31b7360e6d5241463063cdd4265b0fb12996d4500edd7349bc35ca733ab50a9a70c71df1c7ae274181a967fb27b7f0b581d9b967e9c3930411b5b40683f867f1ac6daa60481d0edd050da56c2b39365f5df280f412edb6d617400810df8393f1"}, 0xc5, 0x20000000, &(0x7f00000003c0)={0x22, 0x0, 0x28, 0x46, 0x81}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r6}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@dev, r12}, 0x14) r13 = socket(0x2, 0x6, 0x0) ioctl(r13, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000c80)={&(0x7f0000000240), 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x220, r9, 0x200, 0x91ec, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0xffffffffffffff24}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r4}}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x74, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x15}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x74}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, r16, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x5}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r16, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb66}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaf90}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2b2e3555}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008814) [ 3047.511083][ T7006] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 3047.643073][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:32 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17:52:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x22, 0xd000}]}}}]}, 0x44}}, 0x0) r3 = socket(0x1a, 0x1, 0x8) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200)=0x401, &(0x7f0000000240)=0x2) 17:52:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3], 0x19) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x4ffe0, 0x0) splice(r5, &(0x7f0000000080)=0x2, r7, &(0x7f0000000100)=0x6, 0x7, 0x0) pwrite64(r2, &(0x7f0000000200)='N', 0x1, 0x3f00) 17:52:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="080db5055e0b") recvmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000480)=""/70, 0x46}], 0x4}, 0x2002) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r5 = socket(0x44, 0x2, 0x8) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x48, 0x11, 0x40d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, r4}, [@IFLA_MTU={0x8, 0x4, 0xf8b}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "aed9d7b2ce83a9ad2181c015c174dda1c429047d0ac40521c636c4bd"}]}, 0x48}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000680)={'veth1_macvtap\x00', {0x2, 0x4e22, @remote}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{0x0}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80112804}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc081) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x34, r8, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}]}, 0x34}}, 0x4004011) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@rand_addr="7f5715888d76ef000665726e20bbad5f", @in6=@dev={0xfe, 0x80, [], 0x15}, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x2c}, {0x20, 0x9, 0x1, 0x7, 0x40, 0x5, 0x100000001, 0x10000}, {0x1f, 0x1, 0xfff}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x3502, 0x4, 0x2, 0x3, 0x0, 0xffff61ce, 0x2f}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 17:52:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3048.630735][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3048.706391][ T7032] batman_adv: batadv0: Adding interface: veth65 [ 3048.734382][ T7032] batman_adv: batadv0: The MTU of interface veth65 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3048.801176][ T7032] batman_adv: batadv0: Not using interface veth65 (retrying later): interface not active 17:52:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d07000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000fffffff50e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:33 executing program 1: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x8000, @mcast1}], 0x1c) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000140)=0x80) r1 = socket(0x11, 0x800000003, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x1bc}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)=""/62, &(0x7f0000000100)=0x3e) 17:52:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x49, "ff883086511015d42fd20b40a147313a4ad30b60a044140631d17793cf6bd41a4ffdf3f48d67a724c6272df384b2bbf8688669441473ad5158bfef61492fa8acac01d6005ac4e08b10"}, &(0x7f00000001c0)=0x51) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7}, 0x18) connect$can_j1939(r5, &(0x7f0000000180)={0x1d, r2}, 0x18) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000340)="d2", 0xfdef}], 0x1) [ 3049.629895][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:33 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x6, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x200, 0x0, @mcast1, 0xebd}}, [0x9, 0x6, 0x10000, 0xc4b, 0x95, 0xcf9, 0x7fff, 0x8, 0xfffffffffffffff7, 0x2, 0x2, 0xffffffff, 0x4da, 0x5, 0x43]}, &(0x7f0000000440)=0x100) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x5f18301e105154cb}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x168, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xda}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffa401}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7c00}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x69}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa76}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47dd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4010}, 0x2004c001) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x20, r6, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="424b9928b98fe95af38b5a22f3dfb5bc"}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x74}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x705, 0x70bd28, 0x0, {}, [@IFLA_CARRIER_CHANGES={0x8}]}, 0x28}}, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r9 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 17:52:34 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000fffffffe0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r4, 0x49, "ff883086511015d42fd20b40a147313a4ad30b60a044140631d17793cf6bd41a4ffdf3f48d67a724c6272df384b2bbf8688669441473ad5158bfef61492fa8acac01d6005ac4e08b10"}, &(0x7f00000001c0)=0x51) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r7}, 0x18) connect$can_j1939(r5, &(0x7f0000000180)={0x1d, r2}, 0x18) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000340)="d2", 0xfdef}], 0x1) 17:52:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d08000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:36 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000000000000000000200000000001000000000000000000000000000000000000009de69f6ea88578f1b4a415e5f3a85ce959312f1906578bb6a87a0554d1152ca629e4888f1d58a53d5640708ee754487a25b3fbe6e48488342035ed2caf2bf259086c1922bc0137d19d61b7ef3622d13dee60e75ccb874f3dd41cf9f1b47a0d1db4e1dfd42cc92b1dd305a1cc27546431ad169337384f7a2c1ddc1ed3a34cfa811752ab350f0a3922ee685f6c9e00a2f2c2466928d6dbb5de7c6123c806d818b0d6"]}) 17:52:36 executing program 1: ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000140)={'\x00', {0x2, 0x0, @empty}}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140), 0x3c9) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x83) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) r10 = getgid() setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={r8, r9, r10}, 0xc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r11, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r11, 0x0, 0x10, &(0x7f0000000380)='lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00'}, 0x30) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r13 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r13, r12, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r13, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=']\x00'}, 0x30) getuid() r14 = socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f00000003c0)=0x0) r16 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) setsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000440)={r15, r17}, 0xc) pipe(&(0x7f0000000200)) r18 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r18, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r19 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x16, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r19, 0x14a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r20}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000dc0)={r18, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000400)='cpuset\x00', r20}, 0x30) r21 = socket$inet_tcp(0x2, 0x1, 0x0) r22 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r22, 0x0) ioctl$sock_FIOGETOWN(r21, 0x8903, &(0x7f00000003c0)=0x0) r24 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={r23, 0x0, r24}, 0xc) r25 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r25, 0x0, 0x0) r26 = socket$inet_tcp(0x2, 0x1, 0x0) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r27, 0x0) ioctl$sock_FIOGETOWN(r26, 0x8903, &(0x7f00000003c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r27, 0x29, 0x23, 0x0, &(0x7f0000000400)) getgid() setsockopt$sock_cred(r26, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000004940)={{{@in6=@initdev, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000004400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004a40), &(0x7f0000004a80)=0xc) r28 = socket$inet_tcp(0x2, 0x1, 0x0) r29 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r29, 0x0) r30 = getgid() setsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, r30}, 0xc) listen(0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8004) r31 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r31, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000021000505d25a80648c63940d0824fc60100010", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r32, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=']\x00'}, 0x30) r33 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r33, 0x11, 0x64, &(0x7f0000000140), 0x2de) setsockopt$inet_udp_encap(r33, 0x11, 0x68, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_IP_XFRM_POLICY(r33, 0x0, 0x11, &(0x7f0000004b40)={{{@in=@broadcast, @in=@empty}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000004c40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004c80), &(0x7f0000009f80)=0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x10001}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="02ff0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r34}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r35, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r36, 0x100, 0x30}, 0xc) 17:52:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x1f, 0xa, 0xaa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000811) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r2, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x8000) 17:52:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d0a000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:36 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x1800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x1}]}) bind$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000400), 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x15d4b87) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) socket(0x0, 0x0, 0x8) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 17:52:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000007fffffff0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:37 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x1f, 0xa, 0xaa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r5, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r6}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000811) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r2, 0x0, r7, 0x0, 0x4ffe0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x8000) 17:52:37 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x1800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x1}]}) bind$unix(r3, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000400), 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x15d4b87) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) socket(0x0, 0x0, 0x8) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 17:52:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x1040c) r4 = epoll_create1(0x80000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = accept4(r5, &(0x7f00000001c0)=@vsock, &(0x7f0000000080)=0x80, 0x80800) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x5c, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_SEQ={0xc, 0xa, "c6926ee0cf6a5fab"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "c55c0753a96e1bfa315119e6d4"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "49a57c05b5"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @ipv4={[], [], @loopback}, 0x7f}, 0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x0, 0x3}) [ 3054.817194][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3054.858946][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3054.881881][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x40100020) bind$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x1, 0x1, 0x0, 0x80, 0x9, "35caab26fb31b3069961dcb022ee91f88e7c1bb256b03348f976516efaf4995bacbdd0038bb16bdf5b142464f288bfbc5874b0caeff4fdfecb0f7cdb7403c8", 0xd}, 0x60) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) write$binfmt_script(r1, &(0x7f0000000680)=ANY=[], 0xfdb7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x8000003}) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="83fc80161885778dbdfb1c197995af2f7ca64958d0024499b63dc746dad76eaf95d13391d9466d9f17746c2be7529af24a9f0319af583b3f65f7e841ba7f68cd828294befe5763f746f5a33ab984f856e3c7955553be7436f655154620481ff9633b9be1c839cc97842fec6816da2882e4cf1f2571ffc7278ce4e39f3f5e20854a586a0eda6a299dc7d182cef0cd7423d1befa647668cfb6bafbadaf668dd8f302c36946e3b92aed9a22c58c023b0bba9d", 0xffffff56}, {&(0x7f0000000200)="8e99e1e142568cb53be70951b92ebf8e152dbea0f92270d15a6e6cb108f7491ebc1e41f35b72b99bb20632bbc6c307afa9e252693d43ac57bbb182e349316b3cd2417f839525488276491793012e3ab9d07bc437ea7f1c24bea0e28c772647dcaff8f1e45e76497ccfa2e47104be92ef4b3c67f3278020b48cc6ece9539777678e46be516ab163d30435f30d3ad2efe9ffc2369e24", 0x95}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000540)="e4fe4b60d670e024dda4ed4ae406f1e5f700424c8eb6f8cbce254700ea7f3168b0b75a666dc3f653aa08365ab7e9e86283e09e4ac599fff6597ea8aa5991b2eead61a253a12c987225ee818e151b7e6227bdd8dc384444860efe41d2f22e773110ed589e1db8abe1c44d26415a6e61b02fea06dc2598505354534dd1ffe444582ff1fd45d463318638492a169eb4b1755943379cf0337f77ecf553fe33ab9c337e623c0b04acb2acae18b5853b2f0b310b2ff30d50b700dd6ca85bab6c6b3741687ddf209e02f4e0d416", 0xca}], 0x2dc, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, "ef4412bde9c437116ecec2a632109236e116d371cb3c5eb5b5f805b15d8e825ff164a5e2e69c3b206a56f265972cc7acd3c671136e21f66dc0e853178226ee"}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0)={0x27, 0x0, 0x0, 0x4, 0x4, 0x26, "d41d187654db1f814fc81b7539a03780ce2785bd6f0be68f9ed5d88d8643a15d0210dfa6688f63e00c8f9942de6fae167cdd16f3a70e17550e1458972407e0", 0x15}, 0x60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000640)={0x0, 0x4, '\x00', 0x40, 0x1f}) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) recvmsg(r4, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) accept4(r4, &(0x7f0000000680)=@un=@abs, &(0x7f0000000700)=0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6=@mcast1, 0x4e21, 0x7, 0x4e22, 0xfffa, 0xa, 0x80, 0x20, 0x1, r5, r6}, {0x6, 0x40, 0x3e3, 0x7, 0x34ba, 0x7ff, 0x6, 0x2}, {0x913, 0x0, 0x40}, 0x6, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d6, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x3505, 0x0, 0x3, 0x3, 0x81, 0xfffffffe, 0x3f}}, 0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000003c0)={0x3, @bcast, r6}) r7 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") getsockname(0xffffffffffffffff, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 17:52:39 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) r4 = socket(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") connect$llc(r4, &(0x7f0000000000)={0x1a, 0x3, 0x80, 0x40, 0x0, 0x1}, 0x10) [ 3055.463485][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:52:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d0c000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000100005070200"/20, @ANYRES32=0x0, @ANYBLOB="7d21da00000000001000128008000100736974000400028008000a00", @ANYRES32=r4, @ANYBLOB="f7fb92540781"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 17:52:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x40100020) bind$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x1, 0x1, 0x0, 0x80, 0x9, "35caab26fb31b3069961dcb022ee91f88e7c1bb256b03348f976516efaf4995bacbdd0038bb16bdf5b142464f288bfbc5874b0caeff4fdfecb0f7cdb7403c8", 0xd}, 0x60) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x2216) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000003}) write$binfmt_script(r1, &(0x7f0000000680)=ANY=[], 0xfdb7) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x8000003}) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="83fc80161885778dbdfb1c197995af2f7ca64958d0024499b63dc746dad76eaf95d13391d9466d9f17746c2be7529af24a9f0319af583b3f65f7e841ba7f68cd828294befe5763f746f5a33ab984f856e3c7955553be7436f655154620481ff9633b9be1c839cc97842fec6816da2882e4cf1f2571ffc7278ce4e39f3f5e20854a586a0eda6a299dc7d182cef0cd7423d1befa647668cfb6bafbadaf668dd8f302c36946e3b92aed9a22c58c023b0bba9d", 0xffffff56}, {&(0x7f0000000200)="8e99e1e142568cb53be70951b92ebf8e152dbea0f92270d15a6e6cb108f7491ebc1e41f35b72b99bb20632bbc6c307afa9e252693d43ac57bbb182e349316b3cd2417f839525488276491793012e3ab9d07bc437ea7f1c24bea0e28c772647dcaff8f1e45e76497ccfa2e47104be92ef4b3c67f3278020b48cc6ece9539777678e46be516ab163d30435f30d3ad2efe9ffc2369e24", 0x95}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000540)="e4fe4b60d670e024dda4ed4ae406f1e5f700424c8eb6f8cbce254700ea7f3168b0b75a666dc3f653aa08365ab7e9e86283e09e4ac599fff6597ea8aa5991b2eead61a253a12c987225ee818e151b7e6227bdd8dc384444860efe41d2f22e773110ed589e1db8abe1c44d26415a6e61b02fea06dc2598505354534dd1ffe444582ff1fd45d463318638492a169eb4b1755943379cf0337f77ecf553fe33ab9c337e623c0b04acb2acae18b5853b2f0b310b2ff30d50b700dd6ca85bab6c6b3741687ddf209e02f4e0d416", 0xca}], 0x2dc, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, "ef4412bde9c437116ecec2a632109236e116d371cb3c5eb5b5f805b15d8e825ff164a5e2e69c3b206a56f265972cc7acd3c671136e21f66dc0e853178226ee"}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0)={0x27, 0x0, 0x0, 0x4, 0x4, 0x26, "d41d187654db1f814fc81b7539a03780ce2785bd6f0be68f9ed5d88d8643a15d0210dfa6688f63e00c8f9942de6fae167cdd16f3a70e17550e1458972407e0", 0x15}, 0x60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000640)={0x0, 0x4, '\x00', 0x40, 0x1f}) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) recvmsg(r4, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) accept4(r4, &(0x7f0000000680)=@un=@abs, &(0x7f0000000700)=0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@broadcast, @in6=@mcast1, 0x4e21, 0x7, 0x4e22, 0xfffa, 0xa, 0x80, 0x20, 0x1, r5, r6}, {0x6, 0x40, 0x3e3, 0x7, 0x34ba, 0x7ff, 0x6, 0x2}, {0x913, 0x0, 0x40}, 0x6, 0x6e6bb6, 0x0, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d6, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x3505, 0x0, 0x3, 0x3, 0x81, 0xfffffffe, 0x3f}}, 0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000003c0)={0x3, @bcast, r6}) r7 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") getsockname(0xffffffffffffffff, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000300)=0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 17:52:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe8000008dffffff0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:40 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100002c00) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r3 = socket$inet(0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000200)={@fixed={[], 0x10}, 0x9}) shutdown(r4, 0xe8220c1cc90cd5f3) accept4$netrom(r0, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0xe8220c1cc90cd5f3) socket$unix(0x1, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e00)={0x0, r2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) r5 = socket(0x22, 0x2, 0x24) close(r5) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @rand_addr=0x337}, {0x2, 0x4e21, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000100)='syzkaller1\x00', 0x6, 0x1f, 0x19}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e40)) 17:52:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x33, 0x0, "a2ff88b78266e34024528093c6c9f27c21111de74c4b8027926801b188603ab3ed923b84f6837c31e904d1a42d4f8c6e347ea57e0ea09f29936d2595497d436cc7fe0be2a989c0848820e3260f8cb12d"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x104}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000100)={0xb600, 0x8, 0x7ff, 0x7f}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESDEC], @ANYRESDEC=r2, @ANYRESHEX, @ANYRES32], &(0x7f0000000100)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={r2, r3, 0x0, 0xb, &(0x7f0000000e40)='\x80[security\x00'}, 0x30) socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x15, 0x0, 0x4) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r7, 0x29, 0x15, 0x0, 0x4) r8 = socket$inet6(0xa, 0x0, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0x15, 0x0, 0x4) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800), 0xc) r10 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r10, 0x29, 0x15, 0x0, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000001000)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000001100)=0xe8) r12 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, r12}, 0xc) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={r14}, 0xc) r15 = socket$inet(0x2, 0x6, 0x0) bind$inet(r15, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r16}) r17 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, r17}, 0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESDEC], @ANYRESDEC=r18, @ANYRESHEX, @ANYRES32], &(0x7f0000000100)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0}, &(0x7f0000001180)=0xc) r20 = getgid() r21 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r21, 0x29, 0x15, 0x0, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r22 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r22, 0x29, 0x15, 0x0, 0x4) r23 = accept$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001200)=0x1c) r24 = socket$inet6(0xa, 0x0, 0x1) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x4) r25 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001240)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x1cf7b307edf78cb8) r26 = accept4(0xffffffffffffffff, &(0x7f0000002800)=@l2, &(0x7f0000002880)=0x80, 0x800) r27 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r27, 0x29, 0x15, 0x0, 0x4) r28 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002a40)=0x0) r30 = socket$inet(0x2, 0x6, 0x0) bind$inet(r30, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r32 = socket$inet_udp(0x2, 0x2, 0x0) close(r32) splice(r31, 0x0, r32, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r34 = socket$inet_udp(0x2, 0x2, 0x0) close(r34) splice(r33, 0x0, r34, 0x0, 0x4ffe0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r35}) r36 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, r36}, 0xc) r37 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) r39 = getgid() syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800)={r40}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b80)={0x0}, &(0x7f0000002bc0)=0xc) r42 = getuid() r43 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r43, 0x29, 0x15, 0x0, 0x4) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000002c00)={0x0, 0x0, 0x0}, &(0x7f0000002c40)=0xc) sendmmsg$unix(r0, &(0x7f0000002d40)=[{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000940)="0289296faf125ded7100416a1af5b83a7dbfb691d7982ba0ca08b2e06aa7a39fc613456d89af8a7fb0da13ff25570789b3186eef79884410d1262454746d1bb898f8afed3f925ae3ca82e1ef21a2b2d843d787ca49772e2a9ebd94b50e58f25fb4dfa2d457618895ae645b692ecedf693ddbc201f2c80afd2b32c5cd29f5189d7d8c17f926a009ea27956885b38e59490fcd3471d773283b167dd0df81cdc5048b85345318f57274b9ff100083ca4d101cdfd342dfbe05ca05399a61a672cd49904c42c2", 0xc4}, {&(0x7f0000000a40)="0b5e8cea610ff7df6c734bd977c204bbe9a4fdda683fef1c4ec5a7cbc425598530127df2158800f385b2e5ce34aa959d3a4fe8a955e8769a724c4cc38ff4156fbab4af20c334ede441d35b91f8f5d5fcef3fe5d9bf9b", 0x56}, {&(0x7f0000000b40)="96ee9dbffab9e6388f324ff64447dd694db913ad22533548f4ad7b0a8a6ae3067aa69526d402df50", 0x28}, {&(0x7f0000000b80)="a856d2a122bfbc9c9bb01f94969a04710c30e0037760ed2347cf14125005c1293d6676d81b6c5d97c028998313e228f9f23226f35bd389aae4cebdf6329c2359bcd325465e88d5789c0f2d0408e2144f38bc578a89cdd19d78c6cd62e56513b56be9b8e6dccba5155694d74ee2b55e06db08c2b26a37afda54b0207183b5ada8245c5b67aecb99e3cfa0d7721a79723efd88eeed89541a7608e3797a0c45aaaa91325a", 0xa3}, {&(0x7f0000000c80)="759925b402f124e82a444f86966fe8f8789272fcd2d834697f1b26fceb34ed9cac761f4c389f3f793cf9d95a74c9a95a40d911e43d03c001700228f9775eb1125da0982fa4d1fe0af98ffe6aaf5fc93bb359efe9bea5ec2a6674b66d65f59970f73b1d3e76c312a8c021d714301821d6eca411dc", 0x74}, {&(0x7f0000000d40)="fefc571661eaba88722ba8707241564ac8debc371861300c99529d9e0203", 0x1e}, {&(0x7f0000000d80)="a186", 0x2}], 0x7, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee01}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r6, r0, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r19, r20}}}, @rights={{0x28, 0x1, 0x1, [r21, r1, 0xffffffffffffffff, r22, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r23, r24, r25]}}], 0xf8, 0xc840}, {&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000001400)="39823e8875b9d8d66aefb3046be8d2d95cb4aef31e8d767e760e59c8a152c802e87937167e74fb5d9e51194e35eee96e73e02d9e8a51dd277910563a6bf73fef7afb101542525af3d4a0239d04b6a1b5d50b0b715833304d202c7564c31da9166a89e4c09aae589f755126d3ed503cfae765d7d43dc02bf9fef41535d5aca0671e8c87216a6dd4ba36af54101c284158ef56a8998a0a790c8be56ef8b4f991d79ef45f85abbaeefc965b46b52ff228ba71e5a4502248f466402ceed3b40a1885fa222c5af845f150429ebb3f79b16ffa5ff8a84fc798a1118f5dbf5deecaabc541f611a1c0", 0xe5}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002580)="4c509970160ed68a4e1dbde5ec15f6e059affaa7b9e0e41595ec70936cb023910f5ea4e9face940f3e6042cd4c462a0b25a18affa52dfe73aa777cb73f9e1399a13f96204446", 0x46}, {&(0x7f0000002600)="9bdbac9366299dcdcf1e38b431549adde535c90985387cad658073cc5ef299b6422c53131be08cc9be56e1d206bb07e8448b1ca7eaa45b331858c712c5a39cab35b856cdfc1787aee4c3805e5c3ef97f73599a3c1324e93d51c3", 0x5a}, {&(0x7f0000002680)="499b3663a8a1528191e7581ebddde4efa3c3d50b7710690dca0a3fd1bf701ad891595efe43eb632f6588cb5c4f23fdc97c2d313fe1231a701c45304d1f6da19ed5aac1926ac869b7f4ae9267cb916d173b932fd6c50f283498529e419c521e719630881153cf18ca438a7796065858ea7e0254c4fd81449382e44cafb6b4a3155ed48b49ee9aa2b65ef1f9977a26fddf4c0e6a4db44a53999dd3cde16b8eed1e398c2bf2c09828491a1d3059e4b4cc23e7ec492564393e57c181d387982d0b120b4bb82590e997162ee7c951133d596b163579c7455ec3", 0xd7}], 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000103000093ad12af6867710033b283f2be706558ebc46f41e902d5cf118249a7fcb640d10fecd934c04bbc6948364010dc9a4822670bc67d48", @ANYRES32=r1, @ANYRES32=r26, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r27, @ANYRES32=r28], 0x55, 0x40}, {&(0x7f0000002900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002980)="b65c76b65dfd9eb1f4b2e361deb6df62867a0412ea3c80f1a8771c0fa08aa1e1a3f646a47f6f83252e96d8f655a1dd", 0x2f}, {&(0x7f00000029c0)="8fecf7e74d40f216b54117a150533c350b87bb06593ca5a10c", 0x19}], 0x2, &(0x7f0000002c80)=ANY=[@ANYBLOB="1400006b00"/16, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r37, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r40, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r44, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x24008c80}], 0x3, 0x10) r45 = socket(0x10, 0x0, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket(0x10, 0x80002, 0x0) close(r47) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r46, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}}], 0x2, 0xa500) ioctl(r45, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 17:52:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3056.969905][ T27] audit: type=1804 audit(1581616360.972:365): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2373/memory.events" dev="sda1" ino=16689 res=1 [ 3057.093890][ T27] audit: type=1800 audit(1581616360.972:366): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16689 res=0 [ 3057.142582][ T7235] delete_channel: no stack [ 3057.184037][ T27] audit: type=1804 audit(1581616360.972:367): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2373/memory.events" dev="sda1" ino=16689 res=1 [ 3057.250810][ T27] audit: type=1804 audit(1581616361.222:368): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2373/memory.events" dev="sda1" ino=16689 res=1 [ 3057.280627][ T7235] delete_channel: no stack [ 3057.329814][ T27] audit: type=1800 audit(1581616361.222:369): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16689 res=0 17:52:41 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") r2 = socket(0x11, 0x800000003, 0x0) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x1bc}, 0x8) r5 = socket(0x11, 0x800000003, 0x0) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r7, 0x1bc}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x18, &(0x7f0000000040)={r7}, 0x8) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x2, {0x0, 0xf0, 0x1}, {0x2}, 0x2}], 0x20) 17:52:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d0e000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffd5a, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="13000077d8a3008c8a620f0001a3c8153b0000003c77b08d32538689e4af919e0ef2187bc7c86a2f52719cbc560b5b5ef9f221063b1f6187cf8745f3f2e52ccc7dac5aaa991170314e228ec119710064ec932e525aa7202c833093a55189e270f585873d909503b700"/120, @ANYRES32=r1, @ANYBLOB="0000000000000000140012800b000100677265746170000004000280"], 0x3}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet(r6, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000500)=0x10, 0x80800) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f00000005c0)={@broadcast, @dev, @broadcast}, &(0x7f0000000580)=0xa5) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev, r10}, 0x14) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa33d, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x8081) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000440)={@l2={0x1f, 0x918, @fixed={[], 0x11}, 0x7f, 0x1}, {&(0x7f00000003c0)}, &(0x7f0000000400)}, 0xa0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000040)=0xbcf7, 0x4) 17:52:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback={0x0, 0x300}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x48810) 17:52:42 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000f5ffffff0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x0, 0x1ff, 0x5a, 0x4, 0x6, 0x72, 0x800, 0x4, 0x5bf, 0x19, 0x4, 0x800, 0xfffffffffffff626, 0x5, 0x5]}, &(0x7f0000000800)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000880)={r3, 0x80000000}, &(0x7f00000008c0)=0x8) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x2}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x203, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x20, r10, 0xc8ef0a4335e6829f, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x12c, r10, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x4055) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000100)=@buf={0x9a, &(0x7f0000000000)="51fd25dafb9f6ab7f8a52288d07f207cc84feafef2c590c55e7e5fdb63e0b10112082eb50e0803e02ff90dfc1aec5113505c8f8f23a8c5d01f5fee59cdde9659af2efaf535a710bc273f5d0e1f1fbce15928c744133c0d81689ce6a4dd2a096c87a05b118b61474641e878f3d71e0b27d2d6837298653aaa2a2a26bc698698bd03bf4ba06a7fc3b28ea53175571c4058adbeb4881f3c5bac3baf"}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32, @ANYBLOB="d68bbad561fa6da1e8c7a26074f33b56fabb27ad1ae498221ea6b6f4c7f797b23539afb8a5c59f5bd6f504b4329aad9f925d838b4fed35ddce508402811e7c5681fd52992372023112286339b92c040ecbc21811"], 0x3c}}, 0x0) 17:52:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d10000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d0e000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:44 executing program 1: socket$packet(0x11, 0x4000000000000a, 0x300) r0 = socket(0x27, 0x800, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000000, 0x2011, r4, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r7) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r11, 0x0) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)) 17:52:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000000c0)={@any, 0x6}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000022000505d25a80648c63940d0424fc60100003400a000000053582c137153e370900018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17:52:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000feffffff0e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3061.296115][ T7351] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 3061.349989][ T7356] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:52:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x10, &(0x7f0000000080)=""/4084, &(0x7f0000001140)=0xff4) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = accept4(r1, 0x0, &(0x7f0000002d40), 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000002d80)={0xffffffffffffffff, 0x8000}) 17:52:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d48000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:45 executing program 1: socket$packet(0x11, 0x4000000000000a, 0x300) r0 = socket(0x27, 0x800, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000000, 0x2011, r4, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r7) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r11, 0x0) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)) 17:52:46 executing program 0: socket$packet(0x11, 0x4000000000000a, 0x300) r0 = socket(0x27, 0x800, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000000, 0x2011, r4, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r6, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000140)=r7) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14) sendmmsg(r8, &(0x7f0000000d00), 0x400004e, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r11, 0x0) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)) 17:52:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:46 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6ca9bff13"], 0x9) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x18, 0x33, 0x119, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b5476491c7e356ff2aa2a9bb635ebfbf24000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf2508000008000e00030000007ab777b163f4e625ba0455a8cd29acc56587814b6ddb9b60ab9b8b774203cea63133b7310edd251dbdf1a7ceb5aa7475350d6893dab261f708afe22597d37bf8d453a8f5438d4e6f73ea00cea862e8d6292448efe412ac5a6b6231e26cb44cf8987ec821a788ccec8dfd46191a40ed683c2df40fccee66c0f76f03aefad78ac64131cc614439eae0b36c09"], 0x3}, 0x1, 0x0, 0x0, 0x20800}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000002300)={0x0, 'bond0\x00', {}, 0x5}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f0000009000)={0x14c, r9, 0x8e6767b8eef245b5, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30}, @IPVS_CMD_ATTR_DAEMON={0x70}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc}, @IPVS_CMD_ATTR_DEST={0x1c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffe9}, @IPVS_CMD_ATTR_DEST={0x48}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x14c}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40b}, @IPVS_CMD_ATTR_DAEMON={0x5c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r10, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000)=ANY=[], 0xfffffecc) r12 = openat$cgroup(r11, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000580)='cpuacct.usage_sys\x00', 0x275a, 0x0) [ 3062.607363][ T27] audit: type=1804 audit(1581616366.612:370): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2379/memory.events" dev="sda1" ino=16737 res=1 [ 3062.647802][ T27] audit: type=1800 audit(1581616366.642:371): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=16737 res=0 [ 3062.677991][ T27] audit: type=1804 audit(1581616366.642:372): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir552070219/syzkaller.s9jcWu/2379/memory.events" dev="sda1" ino=16737 res=1 17:52:47 executing program 0: r0 = socket(0x5, 0x6, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000140), 0x1c) r2 = socket(0x2, 0x6, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a80)={'vxcan1\x00'}) getpeername$packet(r0, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b00)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x4, [], r3}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x1f) write(r5, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000400020423dcffdf00", 0xfe3e) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000280)={'team0\x00', 0x6a}) r6 = socket(0x10, 0x3, 0xc) write(r6, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x1f) write(r6, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000400020423dcffdf00", 0xfe3e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000080)={0x7, 'hsr0\x00', {0x9}, 0xf001}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") socket(0x10, 0x803, 0x0) 17:52:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000200000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3063.489898][ T7405] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:52:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d4c000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x101}) r1 = socket(0x2, 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x0, 0xfe01}, &(0x7f0000000200)=0x90) r3 = socket(0x2, 0x6, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={0x0, @nl=@unspec, @sco={0x1f, @none}, @rc={0x1f, @fixed={[], 0x11}, 0x7}, 0x3f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x70e8, 0x8, 0xe5b3}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0xa8, "b7993256b4087eec4d4ec91934432810b8783de835f0fdfa95271cef280a19aa476578914b686d5fc12e15f8b4806ed8daf2f19a3c1f1c790d41fdfdbdc4c4e82c56f9ad54b647bd9e42da6c54d6a38437fbd8e6abff845a92b487484da53b65dd0221f02c550b7488c002cea2f02cdd0872220834c16c9f974ed365f8c48c0a3a248361811dbf638923e54410524f71e955b7ef8cb6c23f4876c5749423374f8b081fea22e10dc2"}, &(0x7f0000000300)=0xb0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x3, 0x23, 0x2, "c21769f8f0e0a4fd9e53ec927df337e76544fa71f2c8267ccba07c07537c4cbb463e05ff1124aef13817e8a1c8ca818e4b3b5722cf59d8589859e684004af3", 0x3c}, 0x60) r4 = socket(0x2, 0x6, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000400)={0x7, 0xde40, 0x3, 0xfffffffd, 0xfffffffc}) r5 = socket(0x2, 0x3, 0xe1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev, r8}, 0x14) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000440)) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f00000003c0)={r8, 0x1, 0x6, @local}, 0x10) r9 = socket(0x2, 0x6, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") setsockopt$netrom_NETROM_N2(r9, 0x103, 0x3, &(0x7f00000000c0)=0x2c4, 0x4) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0xf0}, 0xc) [ 3063.596798][ T7405] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3063.903368][ T7427] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3063.976699][ T7407] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 3064.075880][T14704] BUG: sleeping function called from invalid context at net/core/sock.c:2935 [ 3064.085345][T14704] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14704, name: kworker/1:22 [ 3064.094741][T14704] 3 locks held by kworker/1:22/14704: [ 3064.100185][T14704] #0: ffff8880aa426d28 ((wq_completion)events){+.+.}, at: process_one_work+0x8dd/0x17a0 [ 3064.110348][T14704] #1: ffffc90017ca7dc0 ((work_completion)(&map->work)){+.+.}, at: process_one_work+0x917/0x17a0 [ 3064.120965][T14704] #2: ffff8880921045b8 (&stab->lock){+...}, at: sock_map_free+0x31/0x340 [ 3064.129826][T14704] Preemption disabled at: [ 3064.129845][T14704] [] sock_map_free+0x31/0x340 [ 3064.140588][T14704] CPU: 1 PID: 14704 Comm: kworker/1:22 Not tainted 5.5.0-syzkaller #0 [ 3064.148842][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.159081][T14704] Workqueue: events bpf_map_free_deferred [ 3064.164816][T14704] Call Trace: [ 3064.168123][T14704] dump_stack+0x197/0x210 [ 3064.172473][T14704] ? sock_map_free+0x31/0x340 [ 3064.177240][T14704] ___might_sleep.cold+0x1fb/0x23e [ 3064.182469][T14704] __might_sleep+0x95/0x190 [ 3064.187145][T14704] lock_sock_nested+0x39/0x120 [ 3064.191950][T14704] sock_map_free+0xf2/0x340 [ 3064.196483][T14704] ? memset+0x32/0x40 [ 3064.200487][T14704] bpf_map_free_deferred+0xb3/0x100 [ 3064.205841][T14704] ? bpf_map_charge_move+0x80/0x80 [ 3064.210973][T14704] ? trace_hardirqs_on+0x67/0x240 [ 3064.216024][T14704] process_one_work+0xa05/0x17a0 [ 3064.221068][T14704] ? mark_held_locks+0xf0/0xf0 [ 3064.225859][T14704] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3064.231246][T14704] ? lock_acquire+0x190/0x410 [ 3064.235976][T14704] worker_thread+0x98/0xe40 [ 3064.240622][T14704] kthread+0x361/0x430 [ 3064.244705][T14704] ? process_one_work+0x17a0/0x17a0 [ 3064.249904][T14704] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 3064.255659][T14704] ret_from_fork+0x24/0x30 [ 3064.260277][T14704] [ 3064.262605][T14704] ====================================================== [ 3064.269614][T14704] WARNING: possible circular locking dependency detected [ 3064.278896][T14704] 5.5.0-syzkaller #0 Tainted: G W [ 3064.285315][T14704] ------------------------------------------------------ [ 3064.296789][T14704] kworker/1:22/14704 is trying to acquire lock: [ 3064.303081][T14704] ffff8880546c6110 (sk_lock-AF_INET6){+.+.}, at: sock_map_free+0xf2/0x340 [ 3064.311686][T14704] [ 3064.311686][T14704] but task is already holding lock: [ 3064.319060][T14704] ffff8880921045b8 (&stab->lock){+...}, at: sock_map_free+0x31/0x340 [ 3064.327142][T14704] [ 3064.327142][T14704] which lock already depends on the new lock. [ 3064.327142][T14704] [ 3064.337767][T14704] [ 3064.337767][T14704] the existing dependency chain (in reverse order) is: [ 3064.346783][T14704] [ 3064.346783][T14704] -> #1 (&stab->lock){+...}: [ 3064.353561][T14704] _raw_spin_lock_bh+0x33/0x50 [ 3064.358847][T14704] sock_map_update_common+0x205/0x9c0 [ 3064.364970][T14704] sock_map_update_elem+0x2af/0x300 [ 3064.370693][T14704] bpf_map_update_value.isra.0+0x2a6/0x8e0 [ 3064.377048][T14704] __do_sys_bpf+0x3163/0x41e0 [ 3064.382250][T14704] __x64_sys_bpf+0x73/0xb0 [ 3064.387200][T14704] do_syscall_64+0xfa/0x790 [ 3064.392235][T14704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3064.398730][T14704] [ 3064.398730][T14704] -> #0 (sk_lock-AF_INET6){+.+.}: [ 3064.405956][T14704] __lock_acquire+0x2596/0x4a00 [ 3064.411327][T14704] lock_acquire+0x190/0x410 [ 3064.416483][T14704] lock_sock_nested+0xcb/0x120 [ 3064.421769][T14704] sock_map_free+0xf2/0x340 [ 3064.426810][T14704] bpf_map_free_deferred+0xb3/0x100 [ 3064.432538][T14704] process_one_work+0xa05/0x17a0 [ 3064.438005][T14704] worker_thread+0x98/0xe40 [ 3064.443045][T14704] kthread+0x361/0x430 [ 3064.447909][T14704] ret_from_fork+0x24/0x30 [ 3064.452928][T14704] [ 3064.452928][T14704] other info that might help us debug this: [ 3064.452928][T14704] [ 3064.463506][T14704] Possible unsafe locking scenario: [ 3064.463506][T14704] [ 3064.471360][T14704] CPU0 CPU1 [ 3064.476725][T14704] ---- ---- [ 3064.482088][T14704] lock(&stab->lock); [ 3064.486157][T14704] lock(sk_lock-AF_INET6); [ 3064.493197][T14704] lock(&stab->lock); [ 3064.500033][T14704] lock(sk_lock-AF_INET6); [ 3064.504527][T14704] [ 3064.504527][T14704] *** DEADLOCK *** [ 3064.504527][T14704] [ 3064.512749][T14704] 3 locks held by kworker/1:22/14704: [ 3064.518122][T14704] #0: ffff8880aa426d28 ((wq_completion)events){+.+.}, at: process_one_work+0x8dd/0x17a0 [ 3064.528844][T14704] #1: ffffc90017ca7dc0 ((work_completion)(&map->work)){+.+.}, at: process_one_work+0x917/0x17a0 [ 3064.539412][T14704] #2: ffff8880921045b8 (&stab->lock){+...}, at: sock_map_free+0x31/0x340 [ 3064.547928][T14704] [ 3064.547928][T14704] stack backtrace: [ 3064.554370][T14704] CPU: 1 PID: 14704 Comm: kworker/1:22 Tainted: G W 5.5.0-syzkaller #0 [ 3064.564023][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.575841][T14704] Workqueue: events bpf_map_free_deferred [ 3064.581546][T14704] Call Trace: [ 3064.585029][T14704] dump_stack+0x197/0x210 [ 3064.589598][T14704] print_circular_bug.isra.0.cold+0x163/0x172 [ 3064.595876][T14704] check_noncircular+0x32e/0x3e0 [ 3064.601150][T14704] ? print_circular_bug.isra.0+0x230/0x230 [ 3064.607058][T14704] ? alloc_list_entry+0xc0/0xc0 [ 3064.611917][T14704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3064.618166][T14704] ? find_first_zero_bit+0x9a/0xc0 [ 3064.623278][T14704] __lock_acquire+0x2596/0x4a00 [ 3064.628140][T14704] ? mark_held_locks+0xf0/0xf0 [ 3064.632899][T14704] lock_acquire+0x190/0x410 [ 3064.637387][T14704] ? sock_map_free+0xf2/0x340 [ 3064.642096][T14704] lock_sock_nested+0xcb/0x120 [ 3064.647229][T14704] ? sock_map_free+0xf2/0x340 [ 3064.651901][T14704] sock_map_free+0xf2/0x340 [ 3064.656502][T14704] ? memset+0x32/0x40 [ 3064.660475][T14704] bpf_map_free_deferred+0xb3/0x100 [ 3064.665667][T14704] ? bpf_map_charge_move+0x80/0x80 [ 3064.671090][T14704] ? trace_hardirqs_on+0x67/0x240 [ 3064.676215][T14704] process_one_work+0xa05/0x17a0 [ 3064.681165][T14704] ? mark_held_locks+0xf0/0xf0 [ 3064.686072][T14704] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3064.691558][T14704] ? lock_acquire+0x190/0x410 [ 3064.696338][T14704] worker_thread+0x98/0xe40 [ 3064.701186][T14704] kthread+0x361/0x430 [ 3064.705274][T14704] ? process_one_work+0x17a0/0x17a0 [ 3064.710794][T14704] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 3064.716876][T14704] ret_from_fork+0x24/0x30 17:52:48 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r10 = socket(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") recvmmsg(r9, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x2, &(0x7f0000004a80)={0x77359400}) 17:52:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3064.984623][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.001958][ T7449] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3065.026588][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.036036][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.063074][ T7449] bond6: (slave bridge2): making interface the new active one [ 3065.072211][ T7449] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 3065.095123][ T7449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3065.104161][ T7449] bond0: (slave bond6): Enslaving as an active interface with an up link [ 3065.117106][ T7449] bond0: (slave bond6): Releasing backup interface 17:52:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000300000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3065.289536][ T7454] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d60000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3065.498717][ T7454] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3065.522231][ T7454] bond0: (slave bond6): Enslaving as an active interface with an up link [ 3065.603926][ T7459] bond0: (slave bond6): Releasing backup interface 17:52:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r10 = socket(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") recvmmsg(r9, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x2, &(0x7f0000004a80)={0x77359400}) 17:52:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3065.858963][ T7483] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3065.875216][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.908869][ T7486] bond8: (slave bridge4): making interface the new active one [ 3065.929340][ T7486] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 3065.938801][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.948375][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.993569][ T7483] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3066.002831][ T7483] bond0: (slave bond8): Enslaving as an active interface with an up link [ 3066.026343][ T7019] bond8: (slave bridge4): link status definitely down, disabling slave 17:52:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3066.042818][ T7019] bond8: now running without any active interface! [ 3066.054930][ T7483] bond0: (slave bond8): Releasing backup interface 17:52:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000500000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3066.392610][ T7512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3066.425369][ T7517] bond9: (slave bridge5): making interface the new active one [ 3066.434701][ T7517] bond9: (slave bridge5): Enslaving as an active interface with an up link 17:52:50 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r10 = socket(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") recvmmsg(r9, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x2, &(0x7f0000004a80)={0x77359400}) [ 3066.617923][ T7512] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3066.629216][ T7512] bond0: (slave bond9): Enslaving as an active interface with an up link [ 3066.640053][ T7517] bond0: (slave bond9): Releasing backup interface 17:52:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3066.779156][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3066.823990][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3066.857054][ T7524] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3066.950736][ T7531] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3066.971831][ T7532] bond10: (slave bridge6): making interface the new active one [ 3066.980944][ T7532] bond10: (slave bridge6): Enslaving as an active interface with an up link 17:52:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d68000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3067.054311][ T7531] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3067.067943][ T7531] bond0: (slave bond10): Enslaving as an active interface with an up link [ 3067.106846][ T7019] bond10: (slave bridge6): link status definitely down, disabling slave [ 3067.115267][ T7019] bond10: now running without any active interface! 17:52:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3067.162729][ T7531] bond0: (slave bond10): Releasing backup interface 17:52:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000700000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:51 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r10 = socket(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") recvmmsg(r9, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x2, &(0x7f0000004a80)={0x77359400}) 17:52:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3067.530780][ T7557] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3067.561803][ T7565] bond11: (slave bridge7): making interface the new active one [ 3067.570786][ T7565] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 3067.582215][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3067.723192][ T7557] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3067.731959][ T7557] bond0: (slave bond11): Enslaving as an active interface with an up link [ 3067.756128][T22909] bond11: (slave bridge7): link status definitely down, disabling slave [ 3067.765441][T22909] bond11: now running without any active interface! [ 3067.879344][ T7575] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3067.913413][ T7575] bond12: (slave bridge8): making interface the new active one [ 3067.922251][ T7575] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 3067.939120][ T7575] 8021q: adding VLAN 0 to HW filter on device bond12 [ 3067.947853][ T7575] bond0: (slave bond12): Enslaving as an active interface with an up link 17:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3067.996082][T18343] bond12: (slave bridge8): link status definitely down, disabling slave [ 3068.009594][T18343] bond12: now running without any active interface! 17:52:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3068.064079][ T7580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3068.103050][ T7580] bond13: (slave bridge9): making interface the new active one 17:52:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000800000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3068.112962][ T7580] bond13: (slave bridge9): Enslaving as an active interface with an up link 17:52:52 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) r10 = socket(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8698071") [ 3068.234137][ T7580] 8021q: adding VLAN 0 to HW filter on device bond13 [ 3068.253863][ T7580] bond0: (slave bond13): Enslaving as an active interface with an up link [ 3068.290973][T18343] bond13: (slave bridge9): link status definitely down, disabling slave [ 3068.305396][T18343] bond13: now running without any active interface! 17:52:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d6c000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3068.503301][ T7607] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3068.540743][ T7612] bond14: (slave bridge10): making interface the new active one [ 3068.551208][ T7612] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 3068.625222][ T7607] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3068.634432][ T7607] bond0: (slave bond14): Enslaving as an active interface with an up link 17:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3068.676260][ T7019] bond14: (slave bridge10): link status definitely down, disabling slave [ 3068.686657][ T7019] bond14: now running without any active interface! [ 3068.803646][ T7619] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3068.828712][ T7620] bond15: (slave bridge11): making interface the new active one [ 3068.840759][ T7620] bond15: (slave bridge11): Enslaving as an active interface with an up link 17:52:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000c00000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3068.861127][ T7619] 8021q: adding VLAN 0 to HW filter on device bond15 [ 3068.869581][ T7619] bond0: (slave bond15): Enslaving as an active interface with an up link [ 3068.885939][ T66] bond15: (slave bridge11): link status definitely down, disabling slave [ 3068.897852][ T66] bond15: now running without any active interface! 17:52:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) r11 = socket(0x10, 0x2, 0x8) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 17:52:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3069.024608][ T7629] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3069.073036][ T7631] bond16: (slave bridge12): making interface the new active one [ 3069.116460][ T7631] bond16: (slave bridge12): Enslaving as an active interface with an up link [ 3069.142019][ T7629] 8021q: adding VLAN 0 to HW filter on device bond16 17:52:53 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) socket(0x10, 0x3, 0x0) [ 3069.160006][ T7629] bond0: (slave bond16): Enslaving as an active interface with an up link 17:52:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3069.387795][ T7655] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3069.409720][ T7656] bond17: (slave bridge13): making interface the new active one [ 3069.419188][ T7656] bond17: (slave bridge13): Enslaving as an active interface with an up link 17:52:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3069.436206][ T7655] 8021q: adding VLAN 0 to HW filter on device bond17 [ 3069.444479][ T7655] bond0: (slave bond17): Enslaving as an active interface with an up link [ 3069.455870][T18343] bond17: (slave bridge13): link status definitely down, disabling slave [ 3069.464559][T18343] bond17: now running without any active interface! [ 3069.535967][ T66] bond16: (slave bridge12): link status definitely down, disabling slave [ 3069.555759][ T66] bond16: now running without any active interface! 17:52:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000001100000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3069.645537][ T7662] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3069.665343][ T7666] bond18: (slave bridge14): making interface the new active one [ 3069.674416][ T7666] bond18: (slave bridge14): Enslaving as an active interface with an up link 17:52:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d74000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3069.705795][ T7662] 8021q: adding VLAN 0 to HW filter on device bond18 [ 3069.719138][ T7662] bond0: (slave bond18): Enslaving as an active interface with an up link [ 3069.736037][T22909] bond18: (slave bridge14): link status definitely down, disabling slave 17:52:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000140)=@req={0x9b, 0x18000000, 0x1, 0x9}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 17:52:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3069.772494][T22909] bond18: now running without any active interface! 17:52:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) 17:52:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) r9 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) [ 3070.015591][ T7684] bond19: (slave bridge15): making interface the new active one [ 3070.031514][ T7684] bond19: (slave bridge15): Enslaving as an active interface with an up link [ 3070.188097][ T7679] 8021q: adding VLAN 0 to HW filter on device bond19 [ 3070.200104][ T7679] bond0: (slave bond19): Enslaving as an active interface with an up link [ 3070.210383][ T7699] __nla_validate_parse: 8 callbacks suppressed [ 3070.210392][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe0, 0x0) r11 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3070.238429][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3070.264829][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3070.311039][ T7704] bond20: (slave bridge16): making interface the new active one [ 3070.320317][ T7704] bond20: (slave bridge16): Enslaving as an active interface with an up link [ 3070.341551][ T7704] 8021q: adding VLAN 0 to HW filter on device bond20 [ 3070.351227][ T7704] bond0: (slave bond20): Enslaving as an active interface with an up link [ 3070.433559][ T7704] bond0: (slave bond20): Releasing backup interface 17:52:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) r10 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 17:52:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3070.704885][ T7712] bond21: (slave bridge17): making interface the new active one [ 3070.721778][ T7712] bond21: (slave bridge17): Enslaving as an active interface with an up link 17:52:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3070.785410][ T7711] 8021q: adding VLAN 0 to HW filter on device bond21 [ 3070.795236][ T7711] bond0: (slave bond21): Enslaving as an active interface with an up link [ 3070.806715][ T66] bond19: (slave bridge15): link status definitely down, disabling slave [ 3070.815716][ T66] bond19: now running without any active interface! [ 3070.826582][ T7712] bond0: (slave bond21): Releasing backup interface 17:52:54 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}]}, 0x30}}, 0x20000801) accept4(r0, 0x0, 0x0, 0x0) 17:52:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000008200000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3070.984262][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3071.152361][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3071.161986][ T7730] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31d7a000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 3071.193788][ T7742] bond22: (slave bridge18): making interface the new active one [ 3071.205765][ T7742] bond22: (slave bridge18): Enslaving as an active interface with an up link [ 3071.247896][ T7739] 8021q: adding VLAN 0 to HW filter on device bond22 [ 3071.257875][ T7739] bond0: (slave bond22): Enslaving as an active interface with an up link [ 3071.305045][ T7739] bond0: (slave bond22): Releasing backup interface 17:52:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) 17:52:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r9 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3071.576011][ T7756] validate_nla: 4 callbacks suppressed [ 3071.576020][ T7756] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3071.604704][ T7760] bond23: (slave bridge19): making interface the new active one [ 3071.614288][ T7760] bond23: (slave bridge19): Enslaving as an active interface with an up link 17:52:55 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local, 0x0}, &(0x7f00000002c0)=0xffffffffffffff62) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xfffffffffffffea3}, 0x1, 0x0, 0x0, 0x10}, 0x40000) accept4(r0, 0x0, 0x0, 0x0) [ 3071.781229][ T7760] 8021q: adding VLAN 0 to HW filter on device bond23 [ 3071.790255][ T7760] bond0: (slave bond23): Enslaving as an active interface with an up link [ 3071.800374][ T7764] bond0: (slave bond23): Releasing backup interface 17:52:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 17:52:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3071.926270][ T7767] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3071.945605][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3071.966337][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:52:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000003000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3072.042038][ T7773] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3072.132223][ T7777] bond24: (slave bridge20): making interface the new active one [ 3072.141790][ T7777] bond24: (slave bridge20): Enslaving as an active interface with an up link [ 3072.225793][ T7777] 8021q: adding VLAN 0 to HW filter on device bond24 [ 3072.238645][ T7777] bond0: (slave bond24): Enslaving as an active interface with an up link [ 3072.249617][ T7773] bond0: (slave bond24): Releasing backup interface 17:52:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 17:52:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x34, 0x3c, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @generic={0x0, 0x4, "b3439aed"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x66) [ 3072.485808][ T7789] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local}, &(0x7f00000002c0)=0xffffffffffffff62) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 3072.556166][ T7791] bond25: (slave bridge21): making interface the new active one [ 3072.584834][ T7791] bond25: (slave bridge21): Enslaving as an active interface with an up link [ 3072.610954][ T7789] 8021q: adding VLAN 0 to HW filter on device bond25 [ 3072.619678][ T7789] bond0: (slave bond25): Enslaving as an active interface with an up link 17:52:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000600"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100138be31df0000000000010000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 17:52:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3072.697375][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3072.840252][ T7812] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[@hopopts={0x2, 0x5, [0x0, 0x0, 0x2], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000000000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3072.886051][ T7817] bond26: (slave bridge22): making interface the new active one [ 3072.894959][ T7817] bond26: (slave bridge22): Enslaving as an active interface with an up link [ 3072.916562][T16329] bond25: (slave bridge21): link status definitely down, disabling slave [ 3072.926154][T16329] bond25: now running without any active interface! 17:52:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3072.959479][ T7812] 8021q: adding VLAN 0 to HW filter on device bond26 [ 3072.970077][ T7812] bond0: (slave bond26): Enslaving as an active interface with an up link [ 3073.085809][ T7825] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 17:52:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000500)={@void, @val={0xf0672ba024d11dc5, 0x0, 0x0, 0x0, 0x80}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "61ae6e", 0x5a, 0x3a, 0x0, @rand_addr="a7ce13a8b1ac8b9a0dc50496f8f8f557", @mcast2, {[@hopopts={0x2, 0x5, [], [@hao={0xc9, 0x10, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3a]}}, @generic={0x0, 0x15, "b3439aedfe800000000005000e0c6b1b4e1fc8ae80"}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}, {"15f7"}}}}}}, 0x8c) [ 3073.178462][ T7830] bond27: (slave bridge23): making interface the new active one [ 3073.187281][ T7830] bond27: (slave bridge23): Enslaving as an active interface with an up link [ 3073.201662][ T7831] 8021q: adding VLAN 0 to HW filter on device bond27 [ 3073.211664][ T7831] bond0: (slave bond27): Enslaving as an active interface with an up link 17:52:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765000004000200"], 0x3c}}, 0x6000000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 3073.236267][ T7019] bond26: (slave bridge22): link status definitely down, disabling slave [ 3073.244874][ T7019] bond26: now running without any active interface! 17:52:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local}, &(0x7f00000002c0)=0xffffffffffffff62) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a562210