x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a000200", 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00'}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r0, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) 16:06:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 607.997611][T13720] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 16:06:37 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:37 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r5}, 0x38) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:37 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x0, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 608.514609][T13739] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:38 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:38 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:38 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 609.595448][T13755] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:39 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x0, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r5}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:39 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r5}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 610.671494][T13778] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:40 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r5}, 0x38) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 611.727831][T13797] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) 16:06:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r5}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) [ 612.709281][T13812] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:42 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 613.704631][T13834] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) 16:06:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0x0, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:43 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:43 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 614.742596][T13846] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 614.829983][T13849] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:44 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0x0, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:44 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:44 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:44 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) [ 615.908516][T13870] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 616.170665][T13878] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. 16:06:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0x0, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:45 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:45 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:45 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 616.954590][T13886] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:06:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:46 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:47 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:48 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:48 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:48 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:49 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:50 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:51 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) 16:06:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x0) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:52 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:52 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:53 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:53 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:53 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:53 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:54 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:54 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:54 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) 16:06:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, 0x0, 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 626.169490][T14056] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 16:06:55 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:55 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:56 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, 0x0, 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:56 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:56 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a}, {0x9, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) 16:06:56 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, 0x0, 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendfile(r8, r9, &(0x7f0000000300)=0x7fff, 0x2) 16:06:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58b"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:58 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:06:58 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 629.648852][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.655417][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 16:06:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:06:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_delroute={0x34, 0x19, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0xb7289dbf2490b872, 0x80, 0x0, 0x4, 0xfd, 0x4}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004830}, 0x400c080) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r2, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) 16:06:59 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:06:59 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:06:59 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 630.793316][T14122] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 16:07:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:00 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 631.615526][T14123] dccp_close: ABORT with 32 bytes unread 16:07:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3]}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r2, r4, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r6}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r5, 0xffffffffffffffff, r6]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r6, r4, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:01 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:02 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:02 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x0, 0x0, r3}, {0x9, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 634.194976][T14177] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:03 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:04 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375f"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:05 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x0, 0x0, r3}, {0x9, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:05 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:05 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r4]}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r3, r5, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r7}, 0x38) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r6, 0xffffffffffffffff, r7]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r7, r5, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendfile(r9, r10, &(0x7f0000000300)=0x7fff, 0x2) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$sock(r2, &(0x7f0000000480), 0x0, 0x90) 16:07:06 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:06 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 637.473044][T14227] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="00000000460c0000183b004fedc2d1a3f14e06fdf4cb0bc6c770"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7fff}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r4]}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0x800c6613, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000018c0)={0x0, 0xf}, 0x10, r3, r5, 0x0, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r7}, 0x38) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x4f}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @kfunc], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf, 0x4, 0x3}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, r6, 0xffffffffffffffff, r7]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x2d, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x15, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9de}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @ldst={0x2, 0x3, 0x1, 0x0, 0x1, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001b80)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x8, 0x2, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000001840)=[r7, r5, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x5, 0x4, 0xc, 0x9}, {0x5, 0x3, 0xa, 0x5}, {0x4, 0x1, 0xf, 0x8}, {0x0, 0x2, 0xf, 0x9}, {0x0, 0x2, 0xe}], 0x10, 0x5}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendfile(r9, r10, &(0x7f0000000300)=0x7fff, 0x2) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$sock(r2, &(0x7f0000000480), 0x0, 0x90) 16:07:07 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x0, 0x0, r3}, {0x9, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x7ff, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:07 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:08 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000290000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff85000000730000009559f128c7125ed24f462ff77ec6f6cdc92dad0c40e83d9c4f6db836843ad1bd1ed131bdb4a051b76f4d490bbc4507cc88f9454a91648a032f1ea1fa9d3755c278523a049dfb8b6104aeb788602889"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRESOCT=r9, @ANYRESHEX=r4, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRESOCT, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707ce120a5106a595d1c7bb4b639", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{r3}, r5, 0x12, @unused=[0x8000, 0x0, 0xfffffffffffffffb, 0xb68b], @name="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"}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={r1, 0x7fff, 0x4, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r1, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xffff0001, 0x0, 0x1, 0x2ff5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ldst={0x2, 0x2, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x42a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x41, &(0x7f0000000180)=""/65, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r11], &(0x7f0000000580)=[{0x0, 0x4, 0xb, 0x9}, {0x0, 0x2, 0xa, 0x2}, {0x1, 0x4, 0x8, 0x4}, {0x400, 0x5, 0x1, 0x2}, {0x5, 0x4, 0xc, 0xc}], 0x10, 0x1}, 0x90) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xa2, '\x00', 0x0, r4, 0x2, 0x3}, 0x48) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b40)=@generic={&(0x7f0000002b00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c00)={{r4, 0xffffffffffffffff}, &(0x7f0000002b80), &(0x7f0000002bc0)=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x16, 0x1d, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@tail_call, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='syzkaller\x00', 0xfffffffa, 0x1000, &(0x7f0000001840)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x9, &(0x7f0000002c40)=[0xffffffffffffffff, r13, r2, r11, r14, r15, r11], &(0x7f0000002c80)=[{0x1, 0x3, 0x6, 0x4}, {0x1, 0x5, 0x0, 0x1}, {0x1, 0x4, 0x1, 0x5}, {0x5, 0x5, 0x9, 0xa}, {0x2, 0x2, 0x7, 0x4}, {0x3, 0x1, 0xf, 0x6}, {0x0, 0x2, 0xf, 0xc}, {0x2, 0x4, 0x8, 0xd1492973dfa33a6f}, {0x5, 0x4, 0x3, 0x5}], 0x10, 0x7ff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16:07:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_delroute={0x34, 0x19, 0x2, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0xb7289dbf2490b872, 0x80, 0x0, 0x4, 0xfd, 0x4}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004830}, 0x400c080) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r2, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x3e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r7, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="08009e00100000000c217d"], 0x2184}}, 0x0) 16:07:09 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:09 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 640.506326][T14263] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.630168][T14263] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.748650][T14273] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) (fail_nth: 1) 16:07:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (fail_nth: 1) 16:07:10 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f28"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 641.378980][T14279] FAULT_INJECTION: forcing a failure. [ 641.378980][T14279] name failslab, interval 1, probability 0, space 0, times 1 [ 641.500996][T14280] FAULT_INJECTION: forcing a failure. [ 641.500996][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 641.556548][T14279] CPU: 1 PID: 14279 Comm: syz-executor.1 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 641.567080][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 641.577196][T14279] Call Trace: [ 641.580517][T14279] [ 641.583491][T14279] dump_stack_lvl+0x125/0x1b0 [ 641.588252][T14279] should_fail_ex+0x496/0x5b0 [ 641.593138][T14279] should_failslab+0x9/0x20 [ 641.597725][T14279] kmem_cache_alloc_node+0x71/0x330 [ 641.603017][T14279] ? __alloc_skb+0x287/0x330 [ 641.607778][T14279] __alloc_skb+0x287/0x330 [ 641.612272][T14279] ? __napi_build_skb+0x50/0x50 [ 641.617241][T14279] ? __netlink_dump_start+0x9c0/0x9c0 [ 641.622776][T14279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.628765][T14279] netlink_alloc_large_skb+0x4d/0xf0 [ 641.634155][T14279] netlink_sendmsg+0x688/0xd70 [ 641.639037][T14279] ? netlink_unicast+0x810/0x810 [ 641.644063][T14279] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 641.649509][T14279] ? netlink_unicast+0x810/0x810 [ 641.654531][T14279] __sock_sendmsg+0xd5/0x180 [ 641.659197][T14279] sock_write_iter+0x29b/0x3d0 [ 641.664038][T14279] ? __sock_sendmsg+0x180/0x180 [ 641.668987][T14279] do_iter_readv_writev+0x21e/0x3c0 [ 641.674266][T14279] ? generic_copy_file_range+0x1d0/0x1d0 [ 641.679967][T14279] ? bpf_lsm_file_permission+0x9/0x10 [ 641.685398][T14279] ? security_file_permission+0x94/0x100 [ 641.691195][T14279] do_iter_write+0x17f/0x7f0 [ 641.695864][T14279] vfs_writev+0x221/0x700 [ 641.700254][T14279] ? vfs_iter_write+0xb0/0xb0 [ 641.704982][T14279] ? find_held_lock+0x2d/0x110 [ 641.709823][T14279] ? reacquire_held_locks+0x4c0/0x4c0 [ 641.715311][T14279] ? do_writev+0x285/0x370 [ 641.719791][T14279] do_writev+0x285/0x370 [ 641.724217][T14279] ? vfs_writev+0x700/0x700 [ 641.728793][T14279] ? rcu_is_watching+0x12/0xb0 [ 641.733657][T14279] ? syscall_trace_enter.constprop.0+0x107/0x1e0 [ 641.740066][T14279] do_syscall_64+0x40/0x110 [ 641.744654][T14279] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 641.750634][T14279] RIP: 0033:0x7f5989c7cba9 [ 641.755106][T14279] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 641.774866][T14279] RSP: 002b:00007f598aab40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 641.783342][T14279] RAX: ffffffffffffffda RBX: 00007f5989d9bf80 RCX: 00007f5989c7cba9 [ 641.791371][T14279] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 641.799405][T14279] RBP: 00007f598aab4120 R08: 0000000000000000 R09: 0000000000000000 [ 641.807431][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.815448][T14279] R13: 000000000000000b R14: 00007f5989d9bf80 R15: 00007ffc5210b128 [ 641.823498][T14279] [ 641.857878][T14280] CPU: 0 PID: 14280 Comm: syz-executor.3 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 641.868492][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 641.878600][T14280] Call Trace: [ 641.881919][T14280] [ 641.884887][T14280] dump_stack_lvl+0x125/0x1b0 [ 641.889642][T14280] should_fail_ex+0x496/0x5b0 [ 641.894408][T14280] _copy_from_user+0x30/0xf0 [ 641.899118][T14280] copy_msghdr_from_user+0x99/0x160 [ 641.904410][T14280] ? __copy_msghdr+0x460/0x460 [ 641.909256][T14280] ? __lock_task_sighand+0xc2/0x340 [ 641.914552][T14280] ? reacquire_held_locks+0x20b/0x4c0 [ 641.920030][T14280] ___sys_sendmsg+0xff/0x1d0 [ 641.924710][T14280] ? do_recvmmsg+0x740/0x740 [ 641.929421][T14280] ? find_held_lock+0x2d/0x110 [ 641.934309][T14280] ? __fget_light+0xe6/0x260 [ 641.938976][T14280] __sys_sendmsg+0x117/0x1e0 [ 641.943640][T14280] ? __sys_sendmsg_sock+0x30/0x30 [ 641.948742][T14280] ? bpf_trace_run2+0x18d/0x410 [ 641.953669][T14280] ? rcu_is_watching+0x12/0xb0 [ 641.958493][T14280] ? syscall_trace_enter.constprop.0+0x107/0x1e0 [ 641.964879][T14280] do_syscall_64+0x40/0x110 [ 641.969430][T14280] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 641.975382][T14280] RIP: 0033:0x7f27bc67cba9 [ 641.979826][T14280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 641.999559][T14280] RSP: 002b:00007f27bd44d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.008013][T14280] RAX: ffffffffffffffda RBX: 00007f27bc79c050 RCX: 00007f27bc67cba9 [ 642.016037][T14280] RDX: 0000000000000000 RSI: 0000000020002380 RDI: 0000000000000006 [ 642.024028][T14280] RBP: 00007f27bd44d120 R08: 0000000000000000 R09: 0000000000000000 [ 642.032020][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.040012][T14280] R13: 000000000000006e R14: 00007f27bc79c050 R15: 00007ffdc72a1788 [ 642.048028][T14280] 16:07:11 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (fail_nth: 2) 16:07:11 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (fail_nth: 3) 16:07:12 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) (fail_nth: 2) 16:07:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:12 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 643.755546][T14300] FAULT_INJECTION: forcing a failure. [ 643.755546][T14300] name failslab, interval 1, probability 0, space 0, times 0 [ 643.770783][T14303] FAULT_INJECTION: forcing a failure. [ 643.770783][T14303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.813405][T14303] CPU: 0 PID: 14303 Comm: syz-executor.1 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 643.823908][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 643.834012][T14303] Call Trace: [ 643.837334][T14303] [ 643.840312][T14303] dump_stack_lvl+0x125/0x1b0 [ 643.845139][T14303] should_fail_ex+0x496/0x5b0 [ 643.849912][T14303] _copy_from_iter+0x246/0x10f0 [ 643.854906][T14303] ? __alloc_skb+0x1c5/0x330 [ 643.859569][T14303] ? page_copy_sane+0x2c0/0x2c0 [ 643.864492][T14303] ? __napi_build_skb+0x50/0x50 [ 643.869413][T14303] ? __netlink_dump_start+0x9c0/0x9c0 [ 643.874865][T14303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 643.880842][T14303] ? __virt_addr_valid+0x5e/0x2d0 [ 643.885974][T14303] ? __phys_addr_symbol+0x30/0x70 [ 643.891076][T14303] ? __check_object_size+0x323/0x730 [ 643.896437][T14303] netlink_sendmsg+0x812/0xd70 [ 643.901304][T14303] ? netlink_unicast+0x810/0x810 [ 643.906370][T14303] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 643.911724][T14303] ? netlink_unicast+0x810/0x810 [ 643.916741][T14303] __sock_sendmsg+0xd5/0x180 [ 643.921408][T14303] sock_write_iter+0x29b/0x3d0 [ 643.926245][T14303] ? __sock_sendmsg+0x180/0x180 [ 643.931190][T14303] do_iter_readv_writev+0x21e/0x3c0 [ 643.936459][T14303] ? generic_copy_file_range+0x1d0/0x1d0 [ 643.942167][T14303] ? bpf_lsm_file_permission+0x9/0x10 [ 643.947604][T14303] ? security_file_permission+0x94/0x100 [ 643.953342][T14303] do_iter_write+0x17f/0x7f0 [ 643.958066][T14303] vfs_writev+0x221/0x700 [ 643.962466][T14303] ? vfs_iter_write+0xb0/0xb0 [ 643.967297][T14303] ? find_held_lock+0x2d/0x110 [ 643.972151][T14303] ? reacquire_held_locks+0x4c0/0x4c0 [ 643.977636][T14303] ? do_writev+0x285/0x370 [ 643.982117][T14303] do_writev+0x285/0x370 [ 643.986423][T14303] ? vfs_writev+0x700/0x700 [ 643.990988][T14303] ? rcu_is_watching+0x12/0xb0 [ 643.995843][T14303] ? syscall_trace_enter.constprop.0+0x107/0x1e0 [ 644.002254][T14303] do_syscall_64+0x40/0x110 [ 644.006845][T14303] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 644.012853][T14303] RIP: 0033:0x7f5989c7cba9 [ 644.017323][T14303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 644.037083][T14303] RSP: 002b:00007f598aab40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 644.045727][T14303] RAX: ffffffffffffffda RBX: 00007f5989d9bf80 RCX: 00007f5989c7cba9 [ 644.053842][T14303] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 644.061979][T14303] RBP: 00007f598aab4120 R08: 0000000000000000 R09: 0000000000000000 [ 644.070010][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.078224][T14303] R13: 000000000000000b R14: 00007f5989d9bf80 R15: 00007ffc5210b128 [ 644.086367][T14303] [ 644.101412][T14300] CPU: 1 PID: 14300 Comm: syz-executor.3 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 644.111921][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 644.122036][T14300] Call Trace: [ 644.125355][T14300] [ 644.128363][T14300] dump_stack_lvl+0x125/0x1b0 [ 644.133107][T14300] should_fail_ex+0x496/0x5b0 [ 644.139074][T14300] should_failslab+0x9/0x20 [ 644.143638][T14300] __kmem_cache_alloc_node+0x6b/0x310 [ 644.149106][T14300] ? __get_vm_area_node+0xe1/0x3d0 [ 644.154300][T14300] kmalloc_node_trace+0x22/0x60 [ 644.159225][T14300] __get_vm_area_node+0xe1/0x3d0 [ 644.164217][T14300] ? lockdep_hardirqs_on+0x7d/0x110 [ 644.169499][T14300] __vmalloc_node_range+0x27a/0x1540 [ 644.174846][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 644.180385][T14300] ? netlink_recvmsg+0xf20/0xf20 [ 644.185386][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 644.190931][T14300] ? preempt_count_sub+0x160/0x160 [ 644.196100][T14300] ? delayed_vfree_work+0x70/0x70 [ 644.201200][T14300] ? netlink_autobind.isra.0+0x364/0x5f0 [ 644.206913][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 644.212534][T14300] vmalloc+0x6b/0x80 [ 644.216486][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 644.222023][T14300] netlink_alloc_large_skb+0x74/0xf0 [ 644.227398][T14300] netlink_sendmsg+0x688/0xd70 [ 644.232248][T14300] ? netlink_unicast+0x810/0x810 [ 644.237251][T14300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.242589][T14300] ? netlink_unicast+0x810/0x810 [ 644.247581][T14300] __sock_sendmsg+0xd5/0x180 [ 644.252213][T14300] ____sys_sendmsg+0x6ac/0x940 [ 644.257193][T14300] ? copy_msghdr_from_user+0x10b/0x160 [ 644.262709][T14300] ? kernel_sendmsg+0x50/0x50 [ 644.267446][T14300] ? find_held_lock+0x2d/0x110 [ 644.272262][T14300] ___sys_sendmsg+0x135/0x1d0 [ 644.276986][T14300] ? do_recvmmsg+0x740/0x740 [ 644.281621][T14300] ? find_held_lock+0x2d/0x110 [ 644.286459][T14300] ? __fget_light+0xe6/0x260 [ 644.291084][T14300] __sys_sendmsg+0x117/0x1e0 [ 644.295721][T14300] ? __sys_sendmsg_sock+0x30/0x30 [ 644.300810][T14300] ? syscall_enter_from_user_mode+0x7f/0x120 [ 644.306833][T14300] do_syscall_64+0x40/0x110 [ 644.311375][T14300] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 644.317314][T14300] RIP: 0033:0x7f27bc67cba9 [ 644.321751][T14300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 644.341479][T14300] RSP: 002b:00007f27bd46e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.349949][T14300] RAX: ffffffffffffffda RBX: 00007f27bc79bf80 RCX: 00007f27bc67cba9 [ 644.357947][T14300] RDX: 0000000000000000 RSI: 0000000020002380 RDI: 0000000000000005 [ 644.365942][T14300] RBP: 00007f27bd46e120 R08: 0000000000000000 R09: 0000000000000000 [ 644.373935][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.381930][T14300] R13: 000000000000000b R14: 00007f27bc79bf80 R15: 00007ffdc72a1788 [ 644.389954][T14300] [ 644.499065][T14312] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 644.571469][T14300] syz-executor.3: vmalloc error: size 8960, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 16:07:13 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:13 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 644.948899][T14300] CPU: 1 PID: 14300 Comm: syz-executor.3 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 644.959500][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 644.969717][T14300] Call Trace: [ 644.973046][T14300] [ 644.976021][T14300] dump_stack_lvl+0x125/0x1b0 [ 644.980780][T14300] warn_alloc+0x24a/0x3a0 [ 644.985215][T14300] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 644.990850][T14300] ? __kmem_cache_alloc_node+0x6b/0x310 [ 644.996573][T14300] ? __kasan_kmalloc+0x86/0xb0 [ 645.001412][T14300] ? __get_vm_area_node+0x281/0x3d0 [ 645.006693][T14300] __vmalloc_node_range+0xc13/0x1540 [ 645.012092][T14300] ? netlink_recvmsg+0xf20/0xf20 [ 645.017132][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 645.022696][T14300] ? preempt_count_sub+0x160/0x160 [ 645.027883][T14300] ? delayed_vfree_work+0x70/0x70 [ 645.032992][T14300] ? netlink_autobind.isra.0+0x364/0x5f0 [ 645.038827][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 645.044494][T14300] vmalloc+0x6b/0x80 [ 645.048477][T14300] ? netlink_alloc_large_skb+0x74/0xf0 [ 645.054136][T14300] netlink_alloc_large_skb+0x74/0xf0 [ 645.059516][T14300] netlink_sendmsg+0x688/0xd70 [ 645.064380][T14300] ? netlink_unicast+0x810/0x810 [ 645.069421][T14300] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 645.074957][T14300] ? netlink_unicast+0x810/0x810 [ 645.079978][T14300] __sock_sendmsg+0xd5/0x180 [ 645.084639][T14300] ____sys_sendmsg+0x6ac/0x940 [ 645.089468][T14300] ? copy_msghdr_from_user+0x10b/0x160 [ 645.094998][T14300] ? kernel_sendmsg+0x50/0x50 [ 645.099760][T14300] ? find_held_lock+0x2d/0x110 [ 645.104605][T14300] ___sys_sendmsg+0x135/0x1d0 [ 645.109368][T14300] ? do_recvmmsg+0x740/0x740 [ 645.114036][T14300] ? find_held_lock+0x2d/0x110 [ 645.118910][T14300] ? __fget_light+0xe6/0x260 [ 645.123559][T14300] __sys_sendmsg+0x117/0x1e0 [ 645.128247][T14300] ? __sys_sendmsg_sock+0x30/0x30 [ 645.133366][T14300] ? syscall_enter_from_user_mode+0x7f/0x120 [ 645.139415][T14300] do_syscall_64+0x40/0x110 [ 645.143991][T14300] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 645.150021][T14300] RIP: 0033:0x7f27bc67cba9 [ 645.154494][T14300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 645.174251][T14300] RSP: 002b:00007f27bd46e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.182733][T14300] RAX: ffffffffffffffda RBX: 00007f27bc79bf80 RCX: 00007f27bc67cba9 [ 645.190769][T14300] RDX: 0000000000000000 RSI: 0000000020002380 RDI: 0000000000000005 [ 645.198807][T14300] RBP: 00007f27bd46e120 R08: 0000000000000000 R09: 0000000000000000 [ 645.206835][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.214868][T14300] R13: 000000000000000b R14: 00007f27bc79bf80 R15: 00007ffdc72a1788 [ 645.222924][T14300] [ 645.306646][T14300] Mem-Info: [ 645.313469][T14300] active_anon:91221 inactive_anon:3047 isolated_anon:0 [ 645.313469][T14300] active_file:0 inactive_file:50428 isolated_file:0 [ 645.313469][T14300] unevictable:768 dirty:37 writeback:0 [ 645.313469][T14300] slab_reclaimable:10443 slab_unreclaimable:101179 [ 645.313469][T14300] mapped:19714 shmem:1848 pagetables:917 [ 645.313469][T14300] sec_pagetables:0 bounce:0 [ 645.313469][T14300] kernel_misc_reclaimable:0 [ 645.313469][T14300] free:1305863 free_pcp:264 free_cma:0 16:07:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (fail_nth: 4) 16:07:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 1) [ 645.708749][T14321] FAULT_INJECTION: forcing a failure. [ 645.708749][T14321] name failslab, interval 1, probability 0, space 0, times 0 [ 645.856679][T14321] CPU: 1 PID: 14321 Comm: syz-executor.1 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 645.867191][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 645.877306][T14321] Call Trace: [ 645.880638][T14321] [ 645.883616][T14321] dump_stack_lvl+0x125/0x1b0 [ 645.888389][T14321] should_fail_ex+0x496/0x5b0 [ 645.893162][T14321] should_failslab+0x9/0x20 [ 645.897749][T14321] kmem_cache_alloc+0x69/0x2f0 [ 645.902602][T14321] skb_clone+0x171/0x3c0 [ 645.906924][T14321] netlink_deliver_tap+0xb35/0xd00 [ 645.912136][T14321] netlink_unicast+0x5fa/0x810 [ 645.916989][T14321] ? netlink_attachskb+0x880/0x880 [ 645.922163][T14321] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 645.928102][T14321] ? __phys_addr_symbol+0x30/0x70 [ 645.933165][T14321] ? __check_object_size+0x323/0x730 [ 645.938496][T14321] netlink_sendmsg+0x8b7/0xd70 [ 645.943317][T14321] ? netlink_unicast+0x810/0x810 [ 645.948308][T14321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 645.953633][T14321] ? netlink_unicast+0x810/0x810 [ 645.958621][T14321] __sock_sendmsg+0xd5/0x180 [ 645.963247][T14321] sock_write_iter+0x29b/0x3d0 [ 645.968049][T14321] ? __sock_sendmsg+0x180/0x180 [ 645.973052][T14321] do_iter_readv_writev+0x21e/0x3c0 [ 645.978309][T14321] ? generic_copy_file_range+0x1d0/0x1d0 [ 645.983995][T14321] ? bpf_lsm_file_permission+0x9/0x10 [ 645.989510][T14321] ? security_file_permission+0x94/0x100 [ 645.995188][T14321] do_iter_write+0x17f/0x7f0 [ 645.999921][T14321] vfs_writev+0x221/0x700 [ 646.004287][T14321] ? vfs_iter_write+0xb0/0xb0 [ 646.008987][T14321] ? find_held_lock+0x2d/0x110 [ 646.013800][T14321] ? reacquire_held_locks+0x4c0/0x4c0 [ 646.019253][T14321] ? do_writev+0x285/0x370 [ 646.023705][T14321] do_writev+0x285/0x370 [ 646.028063][T14321] ? vfs_writev+0x700/0x700 [ 646.032683][T14321] ? rcu_is_watching+0x12/0xb0 [ 646.038992][T14321] ? syscall_trace_enter.constprop.0+0x107/0x1e0 [ 646.046182][T14321] do_syscall_64+0x40/0x110 [ 646.050754][T14321] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 646.057852][T14321] RIP: 0033:0x7f5989c7cba9 [ 646.062579][T14321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 646.082393][T14321] RSP: 002b:00007f598aab40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 646.090857][T14321] RAX: ffffffffffffffda RBX: 00007f5989d9bf80 RCX: 00007f5989c7cba9 [ 646.098866][T14321] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 646.106881][T14321] RBP: 00007f598aab4120 R08: 0000000000000000 R09: 0000000000000000 [ 646.114887][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.122888][T14321] R13: 000000000000000b R14: 00007f5989d9bf80 R15: 00007ffc5210b128 [ 646.130904][T14321] [ 646.135691][T14300] Node 0 active_anon:364916kB inactive_anon:12192kB active_file:0kB inactive_file:201560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78804kB dirty:144kB writeback:0kB shmem:5864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB writeback_tmp:0kB kernel_stack:10308kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no 16:07:15 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 646.287940][T14326] FAULT_INJECTION: forcing a failure. [ 646.287940][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.352115][T14326] CPU: 0 PID: 14326 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 646.362621][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 646.372723][T14326] Call Trace: [ 646.376149][T14326] [ 646.379132][T14326] dump_stack_lvl+0x125/0x1b0 [ 646.383887][T14326] should_fail_ex+0x496/0x5b0 [ 646.389353][T14326] _copy_from_user+0x30/0xf0 [ 646.394100][T14326] __sys_bpf+0x210/0x4920 [ 646.398497][T14326] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 646.404376][T14326] ? bpf_perf_link_attach+0x540/0x540 [ 646.409814][T14326] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 646.415694][T14326] ? find_held_lock+0x2d/0x110 [ 646.420544][T14326] ? bpf_trace_run2+0x183/0x410 [ 646.425454][T14326] ? reacquire_held_locks+0x4c0/0x4c0 [ 646.430937][T14326] ? ksys_write+0x1a7/0x250 [ 646.435522][T14326] __x64_sys_bpf+0x78/0xc0 [ 646.440191][T14326] ? syscall_enter_from_user_mode+0x107/0x120 [ 646.446406][T14326] do_syscall_64+0x40/0x110 [ 646.450984][T14326] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 646.456952][T14326] RIP: 0033:0x7f968867cba9 [ 646.461396][T14326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 646.481035][T14326] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.489484][T14326] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 646.497482][T14326] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 646.505483][T14326] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 646.513485][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.521477][T14326] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 646.529500][T14326] [ 646.810618][T14300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no 16:07:15 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 2) [ 647.001153][T14300] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.133078][T14300] lowmem_reserve[]: 0 2607 2607 2607 2607 [ 647.151986][T14300] Node 0 DMA32 free:1266384kB boost:0kB min:35364kB low:44204kB high:53044kB reserved_highatomic:0KB active_anon:364696kB inactive_anon:12192kB active_file:0kB inactive_file:201184kB unevictable:1536kB writepending:144kB present:3129332kB managed:2673540kB mlocked:0kB bounce:0kB free_pcp:1540kB local_pcp:840kB free_cma:0kB [ 647.368475][T14339] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 647.468912][T14300] lowmem_reserve[]: 0 0 0 0 0 [ 647.548590][T14300] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:4kB active_file:0kB inactive_file:296kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 647.711996][T14300] lowmem_reserve[]: 0 0 0 0 0 [ 647.780290][T14300] Node 1 Normal free:3940852kB boost:0kB min:54536kB low:68168kB high:81800kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 648.099997][T14300] lowmem_reserve[]: 0 0 0 0 0 [ 648.136557][T14300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 648.388463][T14300] Node 0 DMA32: 204*4kB (UME) 519*8kB (UME) 330*16kB (UME) 220*32kB (UME) 201*64kB (UME) 86*128kB (UME) 35*256kB (UME) 11*512kB (UME) 5*1024kB (M) 11*2048kB (ME) 289*4096kB (UM) = 1267144kB [ 648.556584][T14300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 648.628345][T14300] Node 1 Normal: 175*4kB (UE) 51*8kB (UE) 28*16kB (UE) 187*32kB (UE) 82*64kB (UME) 28*128kB (UE) 18*256kB (UM) 4*512kB (UM) 0*1024kB 1*2048kB (U) 956*4096kB (UME) = 3940852kB [ 648.811359][T14300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.903698][T14300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 648.994989][T14300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 649.106496][T14300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 649.115863][T14300] 52198 total pagecache pages [ 649.244557][T14300] 0 pages in swap cache [ 649.280233][T14300] Free swap = 124996kB [ 649.284468][T14300] Total swap = 124996kB [ 649.368536][T14300] 2097051 pages RAM [ 649.372416][T14300] 0 pages HighMem/MovableOnly [ 649.481671][T14300] 395408 pages reserved [ 649.485920][T14300] 0 pages cma reserved 16:07:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 3) 16:07:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:18 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a8140"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="0f0000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:18 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 4) 16:07:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="c00200001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 650.337255][T14350] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a8140"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 650.577773][T14361] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 5) 16:07:20 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="c00e00001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 651.221331][T14367] FAULT_INJECTION: forcing a failure. [ 651.221331][T14367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.490013][T14367] CPU: 0 PID: 14367 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 651.500548][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 651.511144][T14367] Call Trace: [ 651.514469][T14367] [ 651.517449][T14367] dump_stack_lvl+0x125/0x1b0 [ 651.522231][T14367] should_fail_ex+0x496/0x5b0 [ 651.527098][T14367] _copy_from_user+0x30/0xf0 [ 651.531793][T14367] generic_map_update_batch+0x3b8/0x5a0 [ 651.537417][T14367] ? generic_map_delete_batch+0x700/0x700 [ 651.543209][T14367] ? generic_map_delete_batch+0x700/0x700 [ 651.548999][T14367] bpf_map_do_batch+0x5f4/0x6c0 [ 651.553915][T14367] __sys_bpf+0x7af/0x4920 [ 651.558411][T14367] ? bpf_perf_link_attach+0x540/0x540 [ 651.563846][T14367] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 651.569728][T14367] ? find_held_lock+0x2d/0x110 [ 651.574599][T14367] ? bpf_trace_run2+0x183/0x410 [ 651.579520][T14367] ? reacquire_held_locks+0x4c0/0x4c0 [ 651.585089][T14367] ? ksys_write+0x1a7/0x250 [ 651.589667][T14367] __x64_sys_bpf+0x78/0xc0 [ 651.594139][T14367] ? syscall_enter_from_user_mode+0x107/0x120 [ 651.600275][T14367] do_syscall_64+0x40/0x110 [ 651.604851][T14367] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 651.610830][T14367] RIP: 0033:0x7f968867cba9 [ 651.615291][T14367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 651.634959][T14367] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 651.643443][T14367] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 651.651478][T14367] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 651.659625][T14367] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 651.667661][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.675682][T14367] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 651.683754][T14367] [ 651.700298][T14372] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x2, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 6) 16:07:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="effd00001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 652.537165][T14381] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.631406][T14385] FAULT_INJECTION: forcing a failure. [ 652.631406][T14385] name fail_usercopy, interval 1, probability 0, space 0, times 0 16:07:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="e03f03001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 652.798914][T14385] CPU: 0 PID: 14385 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 652.809434][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 652.819626][T14385] Call Trace: [ 652.822967][T14385] [ 652.825939][T14385] dump_stack_lvl+0x125/0x1b0 [ 652.830699][T14385] should_fail_ex+0x496/0x5b0 [ 652.835487][T14385] _copy_from_user+0x30/0xf0 [ 652.840163][T14385] generic_map_update_batch+0x34a/0x5a0 [ 652.845805][T14385] ? generic_map_delete_batch+0x700/0x700 [ 652.851609][T14385] ? generic_map_delete_batch+0x700/0x700 [ 652.857407][T14385] bpf_map_do_batch+0x5f4/0x6c0 [ 652.862347][T14385] __sys_bpf+0x7af/0x4920 [ 652.866780][T14385] ? bpf_perf_link_attach+0x540/0x540 [ 652.872219][T14385] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 652.878096][T14385] ? find_held_lock+0x2d/0x110 [ 652.882984][T14385] ? bpf_trace_run2+0x183/0x410 [ 652.887907][T14385] ? reacquire_held_locks+0x4c0/0x4c0 [ 652.893393][T14385] ? ksys_write+0x1a7/0x250 [ 652.897976][T14385] __x64_sys_bpf+0x78/0xc0 [ 652.902483][T14385] ? syscall_enter_from_user_mode+0x107/0x120 [ 652.908612][T14385] do_syscall_64+0x40/0x110 [ 652.913198][T14385] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 652.919185][T14385] RIP: 0033:0x7f968867cba9 [ 652.923684][T14385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 652.943537][T14385] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 652.952015][T14385] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 652.960052][T14385] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 652.968416][T14385] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 652.976450][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.984469][T14385] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 652.992516][T14385] 16:07:22 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:22 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 7) 16:07:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x3, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="effdffff1400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 653.563265][T14395] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.593512][T14400] FAULT_INJECTION: forcing a failure. [ 653.593512][T14400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.629882][T14400] CPU: 0 PID: 14400 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 653.640404][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 653.650513][T14400] Call Trace: [ 653.653833][T14400] [ 653.656807][T14400] dump_stack_lvl+0x125/0x1b0 [ 653.661570][T14400] should_fail_ex+0x496/0x5b0 [ 653.666454][T14400] _copy_from_user+0x30/0xf0 [ 653.671278][T14400] generic_map_update_batch+0x3b8/0x5a0 [ 653.676928][T14400] ? generic_map_delete_batch+0x700/0x700 [ 653.682999][T14400] ? generic_map_delete_batch+0x700/0x700 [ 653.688796][T14400] bpf_map_do_batch+0x5f4/0x6c0 [ 653.693711][T14400] __sys_bpf+0x7af/0x4920 [ 653.698091][T14400] ? ksys_write+0x214/0x250 [ 653.702676][T14400] ? bpf_perf_link_attach+0x540/0x540 [ 653.708223][T14400] ? vfs_write+0x14c/0xdf0 [ 653.712712][T14400] ? __mutex_unlock_slowpath+0x165/0x650 [ 653.718536][T14400] ? bit_wait_timeout+0x160/0x160 [ 653.723762][T14400] ? fput+0x30/0x1a0 [ 653.727937][T14400] ? ksys_write+0x1a7/0x250 [ 653.732507][T14400] ? __ia32_sys_read+0xb0/0xb0 [ 653.737348][T14400] __x64_sys_bpf+0x78/0xc0 [ 653.741828][T14400] ? syscall_enter_from_user_mode+0x7f/0x120 [ 653.747885][T14400] do_syscall_64+0x40/0x110 [ 653.752475][T14400] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 653.758451][T14400] RIP: 0033:0x7f968867cba9 [ 653.762905][T14400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 653.782549][T14400] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 653.790999][T14400] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 653.799429][T14400] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 653.807435][T14400] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 653.815425][T14400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.823414][T14400] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 653.831428][T14400] 16:07:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x4, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10200001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 654.068920][T14405] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 8) [ 654.397062][T14407] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 654.593553][T14411] FAULT_INJECTION: forcing a failure. [ 654.593553][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.796689][T14411] CPU: 1 PID: 14411 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 654.807381][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 654.817484][T14411] Call Trace: [ 654.820800][T14411] [ 654.823780][T14411] dump_stack_lvl+0x125/0x1b0 [ 654.828527][T14411] should_fail_ex+0x496/0x5b0 [ 654.833289][T14411] _copy_from_user+0x30/0xf0 [ 654.837949][T14411] generic_map_update_batch+0x34a/0x5a0 [ 654.843568][T14411] ? generic_map_delete_batch+0x700/0x700 [ 654.849378][T14411] ? generic_map_delete_batch+0x700/0x700 [ 654.855185][T14411] bpf_map_do_batch+0x5f4/0x6c0 [ 654.860199][T14411] __sys_bpf+0x7af/0x4920 [ 654.864599][T14411] ? bpf_perf_link_attach+0x540/0x540 [ 654.870031][T14411] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 654.875916][T14411] ? find_held_lock+0x2d/0x110 [ 654.880783][T14411] ? bpf_trace_run2+0x183/0x410 [ 654.885700][T14411] ? reacquire_held_locks+0x4c0/0x4c0 [ 654.891292][T14411] ? ksys_write+0x1a7/0x250 [ 654.895880][T14411] __x64_sys_bpf+0x78/0xc0 [ 654.900362][T14411] ? syscall_enter_from_user_mode+0x107/0x120 [ 654.906492][T14411] do_syscall_64+0x40/0x110 [ 654.911064][T14411] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 654.917039][T14411] RIP: 0033:0x7f968867cba9 [ 654.921499][T14411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 16:07:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10300001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 654.941185][T14411] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 654.949670][T14411] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 654.957704][T14411] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 654.965731][T14411] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 654.973758][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.981790][T14411] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 654.989842][T14411] 16:07:24 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffff", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:25 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:25 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x5, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10400001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 9) 16:07:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:25 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb7", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10500001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 656.743954][T14427] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 656.945142][T14436] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 656.956923][T14438] FAULT_INJECTION: forcing a failure. [ 656.956923][T14438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.147754][T14438] CPU: 1 PID: 14438 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 657.158263][T14438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 657.168379][T14438] Call Trace: [ 657.171705][T14438] [ 657.174686][T14438] dump_stack_lvl+0x125/0x1b0 [ 657.179436][T14438] should_fail_ex+0x496/0x5b0 [ 657.184206][T14438] _copy_from_user+0x30/0xf0 [ 657.188859][T14438] generic_map_update_batch+0x34a/0x5a0 [ 657.194478][T14438] ? generic_map_delete_batch+0x700/0x700 [ 657.200266][T14438] ? generic_map_delete_batch+0x700/0x700 [ 657.206064][T14438] bpf_map_do_batch+0x5f4/0x6c0 [ 657.210975][T14438] __sys_bpf+0x7af/0x4920 [ 657.215353][T14438] ? bpf_perf_link_attach+0x540/0x540 [ 657.220754][T14438] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 657.226601][T14438] ? find_held_lock+0x2d/0x110 [ 657.231431][T14438] ? bpf_trace_run2+0x183/0x410 [ 657.236337][T14438] ? reacquire_held_locks+0x4c0/0x4c0 [ 657.241797][T14438] ? ksys_write+0x1a7/0x250 [ 657.246364][T14438] __x64_sys_bpf+0x78/0xc0 [ 657.250944][T14438] ? syscall_enter_from_user_mode+0x107/0x120 [ 657.257767][T14438] do_syscall_64+0x40/0x110 [ 657.262352][T14438] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 657.268312][T14438] RIP: 0033:0x7f968867cba9 [ 657.272777][T14438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 657.292431][T14438] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.300886][T14438] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 657.308900][T14438] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 657.316996][T14438] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 657.325015][T14438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.333104][T14438] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 657.341209][T14438] 16:07:26 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x6, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) (fail_nth: 10) 16:07:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:27 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb7", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10102001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 658.000944][T14445] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 658.369034][T14453] FAULT_INJECTION: forcing a failure. [ 658.369034][T14453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.536686][T14453] CPU: 1 PID: 14453 Comm: syz-executor.0 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 658.547200][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 658.557308][T14453] Call Trace: [ 658.560627][T14453] [ 658.563596][T14453] dump_stack_lvl+0x125/0x1b0 [ 658.568347][T14453] should_fail_ex+0x496/0x5b0 [ 658.573107][T14453] _copy_from_user+0x30/0xf0 [ 658.577766][T14453] generic_map_update_batch+0x34a/0x5a0 [ 658.583422][T14453] ? generic_map_delete_batch+0x700/0x700 [ 658.589249][T14453] ? generic_map_delete_batch+0x700/0x700 [ 658.595041][T14453] bpf_map_do_batch+0x5f4/0x6c0 [ 658.599953][T14453] __sys_bpf+0x7af/0x4920 [ 658.604330][T14453] ? bpf_perf_link_attach+0x540/0x540 [ 658.609736][T14453] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 658.615586][T14453] ? find_held_lock+0x2d/0x110 [ 658.620415][T14453] ? bpf_trace_run2+0x183/0x410 [ 658.625299][T14453] ? reacquire_held_locks+0x4c0/0x4c0 [ 658.630740][T14453] ? ksys_write+0x1a7/0x250 [ 658.635286][T14453] __x64_sys_bpf+0x78/0xc0 [ 658.639729][T14453] ? syscall_enter_from_user_mode+0x107/0x120 [ 658.645828][T14453] do_syscall_64+0x40/0x110 [ 658.650379][T14453] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 658.656317][T14453] RIP: 0033:0x7f968867cba9 [ 658.660755][T14453] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 658.680399][T14453] RSP: 002b:00007f968942f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.688837][T14453] RAX: ffffffffffffffda RBX: 00007f968879bf80 RCX: 00007f968867cba9 [ 658.696836][T14453] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 658.704832][T14453] RBP: 00007f968942f120 R08: 0000000000000000 R09: 0000000000000000 [ 658.712912][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.720901][T14453] R13: 000000000000000b R14: 00007f968879bf80 R15: 00007fff96e91e18 [ 658.728921][T14453] 16:07:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:28 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x7, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c306"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10103001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:28 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb7", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10104001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 660.013105][T14468] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.145128][T14473] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x8, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:29 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 660.791953][T14478] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10105001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c306"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x9, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) [ 661.847067][T14487] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10106001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:32 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:32 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xe, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c6"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10107001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 663.322755][T14504] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. [ 663.339211][T14501] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:32 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xf, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:33 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10108001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:33 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa70000000000000500000018110000", @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 664.414210][T14516] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a1010e001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x10, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 665.358411][T14529] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a1010f001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x48, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:35 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 666.317138][T14539] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10124001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x4c, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:35 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:35 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xf336, 0x0) 16:07:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10160001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 666.788665][T14555] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x60, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 667.097474][T14566] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.5'. 16:07:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101f0001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 667.278600][T14568] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x68, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 668.135775][T14576] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101a1011400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xa, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:37 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:39 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r0, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r3) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf336, 0x0) 16:07:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x6c, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c00000030000b0100000000000000000000000058000100540001b82b000100696665002c0002800a000400f987316d2d1f00001c000100000010000000000000000000feffffff0000110000000000000002000c00070000000000000000000c00080000f4ff00000000000eb1e1b8b31cb9c5"], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10148021400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:39 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xb, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:39 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 670.024864][T14593] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100031400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:39 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xc, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x74, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:39 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xd, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100051400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r0, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r3) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf336, 0x0) [ 670.919227][T14611] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:40 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x7a, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xe, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101b3051400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 671.418419][T14629] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100061400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xf, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xf0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:41 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r0, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r3) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf336, 0x0) 16:07:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100071400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 672.103517][T14639] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x300, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:41 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa700000000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 672.719491][T14657] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101000e1400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x500, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:42 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf336, 0x0) 16:07:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 673.302446][T14670] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101000f1400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x5c9, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 674.048666][T14685] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100241400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:43 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa700000000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:43 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf336, 0x0) 16:07:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x600, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10102481400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 674.661261][T14702] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x700, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100601400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:44 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa700000000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf336, 0x0) 16:07:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 675.482350][T14712] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10101a11400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x810, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 676.115073][T14730] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10105b31400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x900, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) 16:07:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:45 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100f01400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 676.640773][T14738] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xe00, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) [ 677.359650][T14756] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1c, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100000f00add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xe22, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:46 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) 16:07:46 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001200add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:46 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1d, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 677.911863][T14769] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0xf00, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:47 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001300add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:47 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1e, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 678.758262][T14783] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:47 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000040)=ANY=[], 0xd) getgid() accept(r1, &(0x7f0000002c40)=@hci, &(0x7f0000002cc0)=0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0xb, 0x0, 0xa2fe, &(0x7f0000002d00)) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) socket(0x400000000000010, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x0, 0x0) 16:07:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x1008, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x21, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100021400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 679.061371][T14798] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x1f00, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x22, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100031400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:48 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000001811", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 679.798839][T14810] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:49 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x23, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) 16:07:49 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x2000, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100041400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0xc30, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xc30, r0}, 0x38) [ 680.152351][T14825] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100051400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x2198, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x2, r0}, 0x38) [ 680.439087][T14834] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100061400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x21c0, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) [ 680.682130][T14842] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x3, r0}, 0x38) 16:07:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100071400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x220e, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:50 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000001811", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x4, r0}, 0x38) 16:07:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c46207f030000020000000000000300030000000000f5010000000000004000000000000000db030000000000004000000005003800010080c0060001010000006005000000c5000000000000000100000001000000000800000000000006f2ffffffffffff0800000000000000ffff0000000000009231d706ebbf2b289ef47bc747b84a63fda603191a529db6518198e4019cb874eb5142cdfed59a9454ff7deb51e6b2df6081ad349823f0b8eba5df29eec8f5687f13c13f447f552ecc78b8d041df2a5f10cc1656a4c01dfea812d552197b03da2c13d4e40a63d03b9c8902ef60d6ef7dc92bab9f9e1ef6ed6a8dd2df298e817b6606a17a3c47270063a9a511ced733d471ea8fe0af083841c6fefbca6fb319503dd07af4bc3bf36c56ef3b8dfd652fb5c9537a5789b3f9b9ae97dc78ea144b43eb32c39b8f8bbb911880c7a63d7542b951e323ab36217f281de39e0718c50d3ddbef5dcf8161c1c0fb634c502d29480e8e76f18e2cde772d050602c4d75671a778e5efa8391b72e9cb8336b01bbbc0b742d3ed9762e86596be306c3591766dbad52a6f9740e483a0d90a81404eb1106594cdc6dd43ced1bb514c80a506dd72c3060a2b41c61fae53"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) [ 681.058056][T14847] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100081400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x3f00, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x5, r0}, 0x38) 16:07:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101000e1400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x6, r0}, 0x38) 16:07:50 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa7000000000000050000001811", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) [ 681.405917][T14866] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a101000f1400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x4800, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) [ 681.711796][T14879] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100241400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x7, r0}, 0x38) 16:07:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x4c00, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000001480)="8a", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000226eb2a65cdd38af190004000400ad000200000000000006040000000000f931321047b5342b7e8e1db129b8730000000000000d6e86c6e28df5ab", 0x5b}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001100)={0x0, 0x7}, 0x8) accept4$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="e00000027f0000012100000556bc76c40c54da38020000000885e9d109000000000000009c76dde8698039caab9ff11880a598c87de2105cedd6255ef10ed3d67aa58f7689194d35b1a413f35fd78f16cd000e026cb32dc2da43a9579931fa193334b2cbcf4e7401fe0dbcc416332374cb552ba53c212e47e0e77d7b33913dc63b9497d8abd8f9276eea3b4f06e5b4947f411cff13c4e144aac400755558c4dcdd791a20060d208185d3a7375fccaf5afa2dd7b04fae23e58bd17c84523c67e76ac2dbe77a"], 0x18) sendto$inet6(r0, &(0x7f0000000b40)="a635fbdea550bab098ca91a81f62da1960a7fbf89ed0df928fd1b378860b50f606db5859a77d478efa53617733f8127383ed7501ad4e02869516c9370875a8a0dc74a2b02362a19ce6c638daaa5fdbba18f51e6f95b5ad738bccdba66240b35090950933acc820727c58006fb57cc0b4d6846cc525f485b1d99ed09ad1857d363f76fa2ba93aae771a4ce18be0964c81798029a73ee890ca4b6831403cedec32afe8dad58521025b995e35ce67d9a605535168a4e9e58c0aa1f23e58f9", 0xbd, 0x46, &(0x7f0000000480)={0xa, 0x4e24, 0x3, @mcast1}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @private=0xa010100}, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xe, 0x800) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x10008005) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x13, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @remote, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x25dfdbff}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, @local, 0x5, 0x4, 0xc000, 0x0, 0x7, 0x200000}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="78010000", @ANYRES64=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="14000200626174616476300000000000000000007c0001801400020070696d3672656700000000000000000008000300000000001400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32, @ANYBLOB="08000300020000001400020067726574617030000000000000000000080001007bae7a3a33528e64184fe83e2416e18ef994aea89f2e0fc64bcd43e63a226ae6af75d345a594dfdb4c7f045393ab804c63e2a668ff0d5d768537dcb64503fe501771a443806d39ad8c43cd10b6de118fb5390c95072435f33a9d1260cc1ea62fa6a6d419de68fa841061f70e0017f5203edc4eac4893606eddf668d7623d0feff94b065d1c256bfc7171c0dbeba403fab2ba38c44279ec29e2847a9db65f95519fc45bd9a3f232", @ANYRES32, @ANYBLOB="080003000200000074000180080001002e1e61c23b0ec343db2e9ae1cd78e229475e98e6702eda88401f080ed5f8edc4465f24595908c352efb2e8a294b9bad6018c153ddb39f084b7f44974ec6359d1d6111587780651d60ccfaea494075665a68239f91b9823f918186878084b12c23ddba1674395a7ce74296b6cd3f45175b6c1fb0741b0e0c602b3bbe75076fc291f4fe6131b4212f09bb1d07bfe9051d4aaf6824e51452a6f30fd7ac414ac8166b8b5917d0b665e5d3ed8bbeac357c231163e35d6b07b0ebe10af6531bb298a2543f1a2cb1ffd050e5eae0b47a84a2e5c6d1920d337f06c13c427990711b2b6", @ANYRESDEC=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020069705f767469300000000000000000001400020076657468315f746f5f626174616476000800030003000000140002006d6163766c616e31000000000000000014000200766c616e3100000000000000000000004c000180080003000300000014000200626f6e645f736c6176655f300000000008000300010000001400020073797a6b616c6c6572300000000000000800000000000000001f030001000000eaa1616e90ff485b9426745c873838c7df3e87163c66b11f5b73ef183e58c7c92cb26ae28dee5bbb77f31abb3f76167dd960428972fc0ae84cf6a952caf137207115"], 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@mss={0x2, 0x3}, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x6) sendto$inet6(r0, &(0x7f0000000040)="b7", 0xb98, 0xd9b4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 16:07:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x8, r0}, 0x38) 16:07:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100601400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) [ 682.222076][T14886] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. 16:07:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x9, r0}, 0x38) 16:07:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 16:07:51 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x7}, 0xfffffff9}, 0x1c) socket(0x0, 0x0, 0xf00) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0xc975) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="043ad3339306eaa9fb7b5ba9279559cc55ae09fc37ac96528f502f1ffd24b0bb055fb8"], 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x3a, 0x0, r3}, {0x0, 0x9, 0x91, 0x7fffffffffffffff, 0x7, 0x5, 0x7, 0x3}, {0xffffffffffffffff, 0x80000001, 0x1, 0x8}, 0x0, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xf88, 0x9, 0x1}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x20, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000007aa700000000000005000000181100", @ANYRES32, @ANYBLOB="0000000000000008b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000b86da9b7264010556ea90095000000000000000064050080000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000800007040000f0ffffffb702", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x2}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14, 0x5000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) clock_gettime(0x0, &(0x7f0000003c40)) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/10, 0xa}], 0x1}, 0x7}, {{&(0x7f0000001700)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/58, 0x3a}, {0x0}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/195, 0xc3}], 0x7, &(0x7f0000001ac0)=""/138, 0x8a}, 0x8}, {{&(0x7f0000001b80)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/54, 0x36}, {0x0}, {&(0x7f0000002340)=""/182, 0xb6}, {&(0x7f0000001d80)=""/240, 0xf0}, {0x0}], 0x5, &(0x7f0000002000)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002440)=@hci, 0x80, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}, {&(0x7f0000003500)=""/123, 0x7b}, {&(0x7f00000035c0)=""/52, 0x34}, {&(0x7f0000003600)=""/81, 0x51}], 0x5, &(0x7f0000003700)=""/204, 0xcc}, 0xba21}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/168, 0xa8}], 0x1}, 0x1}], 0x5, 0x10140, &(0x7f0000003c80)) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000001cc0)=0x4, 0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) 16:07:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000002380)={0x0, 0x6000, &(0x7f0000002340)={&(0x7f0000000180)=ANY=[@ANYBLOB="84210000", @ANYRES16=r1, @ANYBLOB="01022abd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0010"], 0x2184}}, 0x0) 16:07:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xa, r0}, 0x38) [ 682.518692][T14898] ------------[ cut here ]------------ [ 682.524229][T14898] WARNING: CPU: 0 PID: 14898 at net/mptcp/protocol.c:2999 mptcp_check_listen_stop.part.0+0x17b/0x240 [ 682.535367][T14898] Modules linked in: [ 682.539352][T14898] CPU: 0 PID: 14898 Comm: syz-executor.1 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 682.549860][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 682.561199][T14898] RIP: 0010:mptcp_check_listen_stop.part.0+0x17b/0x240 [ 682.568348][T14898] Code: 00 00 00 0f b6 45 12 88 44 24 20 44 0f b6 6c 24 20 bf 0a 00 00 00 44 89 ee e8 d1 fd 23 f7 41 80 fd 0a 74 2b e8 96 02 24 f7 90 <0f> 0b 90 e8 8d 02 24 f7 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 [ 682.588168][T14898] RSP: 0018:ffffc9000d16fce0 EFLAGS: 00010293 [ 682.588224][T14901] netlink: 8544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.594268][T14898] RAX: 0000000000000000 RBX: ffff88807d33d5c0 RCX: ffffffff8a63931f [ 682.594345][T14898] RDX: ffff88807aa9bb80 RSI: ffffffff8a63932a RDI: 0000000000000001 [ 682.594369][T14898] RBP: ffff888028414f80 R08: 0000000000000001 R09: 000000000000000a [ 682.628256][T14898] R10: 0000000000000007 R11: 0000000000000002 R12: 1ffff92001a2df9c [ 682.636279][T14898] R13: 0000000000000007 R14: ffff88807d33d5d2 R15: 000000000000000a [ 682.644556][T14898] FS: 0000555556656480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 682.654995][T14898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.661804][T14898] CR2: 0000001b31923000 CR3: 0000000040137000 CR4: 00000000003506f0 [ 682.669870][T14898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 682.678095][T14898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 682.686117][T14898] Call Trace: [ 682.689511][T14898] [ 682.692480][T14898] ? show_regs+0x8f/0xa0 [ 682.696844][T14898] ? __warn+0xe6/0x390 [ 682.700993][T14898] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 682.707362][T14898] ? report_bug+0x3bc/0x580 [ 682.711952][T14898] ? handle_bug+0x3d/0x70 [ 682.716354][T14898] ? exc_invalid_op+0x17/0x40 [ 682.721163][T14898] ? asm_exc_invalid_op+0x1a/0x20 [ 682.726296][T14898] ? mptcp_check_listen_stop.part.0+0x16f/0x240 [ 682.732707][T14898] ? mptcp_check_listen_stop.part.0+0x17a/0x240 [ 682.739171][T14898] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 682.745581][T14898] ? __bpf_trace_subflow_check_data_avail+0x110/0x110 [ 682.752504][T14898] __mptcp_close+0x888/0xa10 [ 682.758613][T14898] ? __sock_release+0x260/0x260 [ 682.763554][T14898] ? __mptcp_unaccepted_force_close+0x120/0x120 [ 682.770078][T14898] ? __local_bh_enable_ip+0xa4/0x120 [ 682.775564][T14898] ? __sock_release+0x260/0x260 [ 682.780555][T14898] mptcp_close+0x28/0xf0 [ 682.784867][T14898] inet_release+0x132/0x270 [ 682.789571][T14898] inet6_release+0x4f/0x70 [ 682.794118][T14898] __sock_release+0xae/0x260 [ 682.798860][T14898] sock_close+0x1c/0x20 [ 682.803086][T14898] __fput+0x270/0xbb0 [ 682.807217][T14898] __fput_sync+0x47/0x50 [ 682.811524][T14898] __x64_sys_close+0x87/0xf0 [ 682.816254][T14898] do_syscall_64+0x40/0x110 [ 682.820882][T14898] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 682.826932][T14898] RIP: 0033:0x7f5989c7ba9a [ 682.831574][T14898] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 682.852371][T14898] RSP: 002b:00007ffc5210b1f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 682.862415][T14898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5989c7ba9a [ 682.870768][T14898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 682.878901][T14898] RBP: 0000000000000032 R08: 0000001b31d20000 R09: 00000000000003e9 [ 682.887004][T14898] R10: 0000000081730138 R11: 0000000000000293 R12: 00007f5989800450 [ 682.895026][T14898] R13: ffffffffffffffff R14: 00007f5989800000 R15: 00000000000a69cc [ 682.903140][T14898] [ 682.906218][T14898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 682.913538][T14898] CPU: 0 PID: 14898 Comm: syz-executor.1 Not tainted 6.7.0-rc4-syzkaller-00953-g00b1b2296b58 #0 [ 682.924002][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 682.934102][T14898] Call Trace: [ 682.937423][T14898] [ 682.940565][T14898] dump_stack_lvl+0xd9/0x1b0 [ 682.945217][T14898] panic+0x6dc/0x790 [ 682.949182][T14898] ? panic_smp_self_stop+0xa0/0xa0 [ 682.954366][T14898] ? show_trace_log_lvl+0x363/0x4f0 [ 682.959650][T14898] ? check_panic_on_warn+0x1f/0xb0 [ 682.964838][T14898] ? mptcp_check_listen_stop.part.0+0x17b/0x240 16:07:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x819, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0xb, r0}, 0x38) [ 682.971230][T14898] check_panic_on_warn+0xab/0xb0 [ 682.976247][T14898] __warn+0xf2/0x390 [ 682.980216][T14898] ? mptcp_check_listen_stop.part.0+0x17b/0x240 [ 682.986555][T14898] report_bug+0x3bc/0x580 [ 682.990956][T14898] handle_bug+0x3d/0x70 [ 682.995175][T14898] exc_invalid_op+0x17/0x40 [ 682.999748][T14898] asm_exc_invalid_op+0x1a/0x20 [ 683.004650][T14898] RIP: 0010:mptcp_check_listen_stop.part.0+0x17b/0x240 [ 683.011557][T14898] Code: 00 00 00 0f b6 45 12 88 44 24 20 44 0f b6 6c 24 20 bf 0a 00 00 00 44 89 ee e8 d1 fd 23 f7 41 80 fd 0a 74 2b e8 96 02 24 f7 90 <0f> 0b 90 e8 8d 02 24 f7 48 b8 00 00 00 00 00 fc ff df 49 c7 04 04 [ 683.031203][T14898] RSP: 0018:ffffc9000d16fce0 EFLAGS: 00010293 [ 683.037386][T14898] RAX: 0000000000000000 RBX: ffff88807d33d5c0 RCX: ffffffff8a63931f [ 683.045383][T14898] RDX: ffff88807aa9bb80 RSI: ffffffff8a63932a RDI: 0000000000000001 [ 683.053381][T14898] RBP: ffff888028414f80 R08: 0000000000000001 R09: 000000000000000a [ 683.061463][T14898] R10: 0000000000000007 R11: 0000000000000002 R12: 1ffff92001a2df9c [ 683.069474][T14898] R13: 0000000000000007 R14: ffff88807d33d5d2 R15: 000000000000000a [ 683.077490][T14898] ? mptcp_check_listen_stop.part.0+0x16f/0x240 [ 683.083774][T14898] ? mptcp_check_listen_stop.part.0+0x17a/0x240 [ 683.090063][T14898] ? __bpf_trace_subflow_check_data_avail+0x110/0x110 [ 683.096881][T14898] __mptcp_close+0x888/0xa10 [ 683.101529][T14898] ? __sock_release+0x260/0x260 [ 683.106431][T14898] ? __mptcp_unaccepted_force_close+0x120/0x120 [ 683.112752][T14898] ? __local_bh_enable_ip+0xa4/0x120 [ 683.118089][T14898] ? __sock_release+0x260/0x260 [ 683.122997][T14898] mptcp_close+0x28/0xf0 [ 683.127308][T14898] inet_release+0x132/0x270 [ 683.131880][T14898] inet6_release+0x4f/0x70 [ 683.136344][T14898] __sock_release+0xae/0x260 [ 683.140979][T14898] sock_close+0x1c/0x20 [ 683.145165][T14898] __fput+0x270/0xbb0 [ 683.149198][T14898] __fput_sync+0x47/0x50 [ 683.153480][T14898] __x64_sys_close+0x87/0xf0 [ 683.158097][T14898] do_syscall_64+0x40/0x110 [ 683.162642][T14898] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 683.168603][T14898] RIP: 0033:0x7f5989c7ba9a [ 683.173043][T14898] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 683.192681][T14898] RSP: 002b:00007ffc5210b1f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 683.201139][T14898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5989c7ba9a [ 683.209133][T14898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 683.217125][T14898] RBP: 0000000000000032 R08: 0000001b31d20000 R09: 00000000000003e9 [ 683.225127][T14898] R10: 0000000081730138 R11: 0000000000000293 R12: 00007f5989800450 [ 683.233150][T14898] R13: ffffffffffffffff R14: 00007f5989800000 R15: 00000000000a69cc [ 683.241191][T14898] [ 683.244481][T14898] Kernel Offset: disabled [ 683.249033][T14898] Rebooting in 86400 seconds..