12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:04:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 432.125303][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.189222][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.832425][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.838781][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:04:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:04:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:04:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:04:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) socket$key(0xf, 0x3, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r6}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) write$binfmt_misc(r9, &(0x7f0000001200)={'syz0', "1db07a87872a39fa"}, 0xc) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7f}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 02:04:47 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 453.325920][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.374559][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:04:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 453.511238][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.532422][ T27] audit: type=1804 audit(1674612288.220:105): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/56/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 453.643352][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.662260][ T27] audit: type=1804 audit(1674612288.350:106): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/56/memory.events" dev="sda1" ino=1139 res=1 errno=0 [ 453.689447][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.771800][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.797269][ T27] audit: type=1804 audit(1674612288.390:107): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/56/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 453.895318][ T27] audit: type=1804 audit(1674612288.390:108): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/56/memory.events" dev="sda1" ino=1139 res=1 errno=0 [ 455.068923][ T9] device hsr_slave_0 left promiscuous mode [ 455.080185][ T9] device hsr_slave_1 left promiscuous mode [ 455.092620][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.100148][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.118622][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.132570][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.142207][ T9] device bridge_slave_1 left promiscuous mode [ 455.149234][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.160589][ T9] device bridge_slave_0 left promiscuous mode [ 455.166902][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.180314][ T9] device veth1_macvtap left promiscuous mode [ 455.191773][ T9] device veth0_macvtap left promiscuous mode [ 455.198101][ T9] device veth1_vlan left promiscuous mode [ 455.204571][ T9] device veth0_vlan left promiscuous mode [ 455.399837][ T9] team0 (unregistering): Port device team_slave_1 removed [ 455.413710][ T9] team0 (unregistering): Port device team_slave_0 removed [ 455.427312][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.443226][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.509915][ T9] bond0 (unregistering): Released all slaves [ 456.174335][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.185514][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.196553][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.207153][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 456.214935][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.448777][ T6636] chnl_net:caif_netlink_parms(): no params data found [ 456.643350][ T6636] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.650747][ T6636] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.659023][ T6636] device bridge_slave_0 entered promiscuous mode [ 456.669072][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.676595][ T6636] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.685217][ T6636] device bridge_slave_1 entered promiscuous mode [ 456.726892][ T6636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.748188][ T6636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.802838][ T6636] team0: Port device team_slave_0 added [ 456.821761][ T6636] team0: Port device team_slave_1 added [ 456.848385][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.855489][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.883436][ T6636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.909732][ T6636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.916923][ T6636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.952770][ T6636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.031669][ T6636] device hsr_slave_0 entered promiscuous mode [ 457.050749][ T6636] device hsr_slave_1 entered promiscuous mode [ 457.962898][ T6636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.983652][ T6636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.001895][ T6636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.017827][ T6636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.176578][ T6636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.205284][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.213838][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.225799][ T6636] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.232975][ T5126] Bluetooth: hci0: command 0x0409 tx timeout [ 458.259858][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.272078][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.281627][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.288742][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.311188][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.319388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.328925][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.337756][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.344990][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.353582][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.363231][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.372328][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.382030][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.407776][ T6636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.425397][ T6636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.439974][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.449397][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.458768][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.468126][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.477557][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.486579][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.496579][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.518662][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.761635][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.769200][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.791203][ T6636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.814710][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 458.824310][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.847840][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 458.856928][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.868987][ T6636] device veth0_vlan entered promiscuous mode [ 458.880860][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.888754][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.902405][ T6636] device veth1_vlan entered promiscuous mode [ 458.928376][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.937604][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.947620][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.971277][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.982397][ T6636] device veth0_macvtap entered promiscuous mode [ 458.997599][ T6636] device veth1_macvtap entered promiscuous mode [ 459.027038][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.038698][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.049862][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.061008][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.071240][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.082171][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.092352][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.105354][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.115617][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.129347][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.143814][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.158444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.173165][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.189149][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.198704][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.217974][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.232860][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.250157][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.270170][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.290757][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.308474][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.318631][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.337304][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.347406][ T6636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.367939][ T6636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.381522][ T6636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.392188][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.401836][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.414058][ T6636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.424533][ T6636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.446510][ T6636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.457064][ T6636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.560953][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.569060][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.600137][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.612499][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 459.616118][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.643466][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 460.330440][ T5126] Bluetooth: hci0: command 0x041b tx timeout [ 462.398142][ T5126] Bluetooth: hci0: command 0x040f tx timeout [ 464.478501][ T5126] Bluetooth: hci0: command 0x0419 tx timeout [ 470.721158][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 02:05:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) (async) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) socket$key(0xf, 0x3, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r6}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) write$binfmt_misc(r9, &(0x7f0000001200)={'syz0', "1db07a87872a39fa"}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7f}]}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:05:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xb07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0304000200"}]}, 0x28}}, 0x0) 02:05:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:05:06 executing program 4: r0 = socket(0x15, 0x3, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xen_mc_flush_reason\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="cb1b706d7ecbd71995fd96a0b0ad60ddd59461dded28918f9d05f0983101e2de5be6bafdbf3b42dfc38bba0ce88bcce3ef9904c54ec95d100744eca62433204f53ca5beacbecb835386c7280f33588fbf04d8e5ab32ab9f65e41aa1d06ff5d8f2b2194697df842b1b07043b1fccd7c1eac467c9311844cb298494d9c7848a6724bcc8b5787e751ffaaf2", 0x8a}, {&(0x7f0000000200)="045f3878a520f8f091e94d069f0e29112bb6b16f33d7ee30339ea948b488940b47db0ca260329760b100e05ba5357b3175d5f5a6d4eb371d645df71f9b47cfd15041ddab0db8943981b8da72b42da94a09c0565b271ec6d70c7ca5e9b7ff5adcb5156ad3524e38ae2e5355f4e11c9097ae0e208245dc64ed29463d485b7f4e", 0x7f}, {&(0x7f0000000280)="77727a23b8b81f2c46c7e14b64ca18136c279a0aec8faeaa957472f0c277c7c57482abc1ee211473ea4391df4f385c26b3ebeb556fcae0afdacf2385af31e1475a4552a5f24a0a71d679618a60e8865637ac3f8a99dcee82883d190ebea1bd8886b9e4b9e96be348beb63fe97ac1186f95d496f32638b9460b74e91995408fde73c59186bb2cd5fbca2fdcac1a9babc58c0db51b71d29e", 0x97}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r6, r7, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x40, 0x404c084}, 0x810) socket(0x1f, 0x5, 0x9) 02:05:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) (async, rerun: 32) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) (async) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000001) (async) socket$key(0xf, 0x3, 0x2) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r6}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 32) r9 = accept4(r8, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) write$binfmt_misc(r9, &(0x7f0000001200)={'syz0', "1db07a87872a39fa"}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x8, 0x0, 0x7f}]}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) [ 471.824662][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 471.928532][ T27] audit: type=1804 audit(1674612306.610:109): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/58/memory.events" dev="sda1" ino=1166 res=1 errno=0 02:05:06 executing program 5: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40030000000007}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000a13000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x43c32000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48040000af68", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c211808000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x37, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) r8 = openat$cgroup_freezer_state(r4, &(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d92549"], 0x6) sendfile(r6, r5, 0x0, 0x10000a006) 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 472.125150][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 472.206113][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 472.218360][ T27] audit: type=1804 audit(1674612306.900:110): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir861005586/syzkaller.Nk6hSH/59/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 [ 472.289238][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:05:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xb07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0304000200"}]}, 0x28}}, 0x0) 02:05:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 484.299651][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 501.274665][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.281092][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:05:52 executing program 4: r0 = socket(0x15, 0x3, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xen_mc_flush_reason\x00'}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="cb1b706d7ecbd71995fd96a0b0ad60ddd59461dded28918f9d05f0983101e2de5be6bafdbf3b42dfc38bba0ce88bcce3ef9904c54ec95d100744eca62433204f53ca5beacbecb835386c7280f33588fbf04d8e5ab32ab9f65e41aa1d06ff5d8f2b2194697df842b1b07043b1fccd7c1eac467c9311844cb298494d9c7848a6724bcc8b5787e751ffaaf2", 0x8a}, {&(0x7f0000000200)="045f3878a520f8f091e94d069f0e29112bb6b16f33d7ee30339ea948b488940b47db0ca260329760b100e05ba5357b3175d5f5a6d4eb371d645df71f9b47cfd15041ddab0db8943981b8da72b42da94a09c0565b271ec6d70c7ca5e9b7ff5adcb5156ad3524e38ae2e5355f4e11c9097ae0e208245dc64ed29463d485b7f4e", 0x7f}, {&(0x7f0000000280)="77727a23b8b81f2c46c7e14b64ca18136c279a0aec8faeaa957472f0c277c7c57482abc1ee211473ea4391df4f385c26b3ebeb556fcae0afdacf2385af31e1475a4552a5f24a0a71d679618a60e8865637ac3f8a99dcee82883d190ebea1bd8886b9e4b9e96be348beb63fe97ac1186f95d496f32638b9460b74e91995408fde73c59186bb2cd5fbca2fdcac1a9babc58c0db51b71d29e", 0x97}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r6, r7, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x40, 0x404c084}, 0x810) socket(0x1f, 0x5, 0x9) socket(0x15, 0x3, 0x3) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xen_mc_flush_reason\x00'}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r4, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r7, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="cb1b706d7ecbd71995fd96a0b0ad60ddd59461dded28918f9d05f0983101e2de5be6bafdbf3b42dfc38bba0ce88bcce3ef9904c54ec95d100744eca62433204f53ca5beacbecb835386c7280f33588fbf04d8e5ab32ab9f65e41aa1d06ff5d8f2b2194697df842b1b07043b1fccd7c1eac467c9311844cb298494d9c7848a6724bcc8b5787e751ffaaf2", 0x8a}, {&(0x7f0000000200)="045f3878a520f8f091e94d069f0e29112bb6b16f33d7ee30339ea948b488940b47db0ca260329760b100e05ba5357b3175d5f5a6d4eb371d645df71f9b47cfd15041ddab0db8943981b8da72b42da94a09c0565b271ec6d70c7ca5e9b7ff5adcb5156ad3524e38ae2e5355f4e11c9097ae0e208245dc64ed29463d485b7f4e", 0x7f}, {&(0x7f0000000280)="77727a23b8b81f2c46c7e14b64ca18136c279a0aec8faeaa957472f0c277c7c57482abc1ee211473ea4391df4f385c26b3ebeb556fcae0afdacf2385af31e1475a4552a5f24a0a71d679618a60e8865637ac3f8a99dcee82883d190ebea1bd8886b9e4b9e96be348beb63fe97ac1186f95d496f32638b9460b74e91995408fde73c59186bb2cd5fbca2fdcac1a9babc58c0db51b71d29e", 0x97}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r6, r7, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x40, 0x404c084}, 0x810) (async) socket(0x1f, 0x5, 0x9) (async) 02:05:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:05:52 executing program 5: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40030000000007}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000a13000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x43c32000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48040000af68", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c211808000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x37, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) r8 = openat$cgroup_freezer_state(r4, &(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d92549"], 0x6) (async) sendfile(r6, r5, 0x0, 0x10000a006) 02:05:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1c, 0xb07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @random="0304000200"}]}, 0x28}}, 0x0) 02:05:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:05:52 executing program 5: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x40030000000007}, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280)={r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) mmap(&(0x7f0000a13000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x43c32000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48040000af68", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c211808000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x37, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async) r8 = openat$cgroup_freezer_state(r4, &(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a30d92549"], 0x6) sendfile(r6, r5, 0x0, 0x10000a006) [ 517.806285][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 517.938370][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:05:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:05:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 518.049630][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.120265][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 02:05:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 518.165693][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.223530][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 02:06:25 executing program 4: r0 = socket(0x15, 0x3, 0x3) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000480)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xen_mc_flush_reason\x00'}, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="cb1b706d7ecbd71995fd96a0b0ad60ddd59461dded28918f9d05f0983101e2de5be6bafdbf3b42dfc38bba0ce88bcce3ef9904c54ec95d100744eca62433204f53ca5beacbecb835386c7280f33588fbf04d8e5ab32ab9f65e41aa1d06ff5d8f2b2194697df842b1b07043b1fccd7c1eac467c9311844cb298494d9c7848a6724bcc8b5787e751ffaaf2", 0x8a}, {&(0x7f0000000200)="045f3878a520f8f091e94d069f0e29112bb6b16f33d7ee30339ea948b488940b47db0ca260329760b100e05ba5357b3175d5f5a6d4eb371d645df71f9b47cfd15041ddab0db8943981b8da72b42da94a09c0565b271ec6d70c7ca5e9b7ff5adcb5156ad3524e38ae2e5355f4e11c9097ae0e208245dc64ed29463d485b7f4e", 0x7f}, {&(0x7f0000000280)="77727a23b8b81f2c46c7e14b64ca18136c279a0aec8faeaa957472f0c277c7c57482abc1ee211473ea4391df4f385c26b3ebeb556fcae0afdacf2385af31e1475a4552a5f24a0a71d679618a60e8865637ac3f8a99dcee82883d190ebea1bd8886b9e4b9e96be348beb63fe97ac1186f95d496f32638b9460b74e91995408fde73c59186bb2cd5fbca2fdcac1a9babc58c0db51b71d29e", 0x97}], 0x3, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [r3, r5, r6, r7, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x40, 0x404c084}, 0x810) socket(0x1f, 0x5, 0x9) 02:06:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000206030000000000000000000000000005000400000000000900020073797a310000000005000100060000000c0007800800124000090000050005000200800015000300686173683a6970435a143e5e65c289150d41122c7902fdd905c67f8c8bdab11a814ddc986aaf229db911cc2ec0a2eafe42d208a884c01e2553f5e68df02e22252d52eb0c75dba46ed1daf61a2b02d85949c493473fa6b7c8b0965630e2fdd1c472e0"], 0x80}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000050001000700015d22161cc3223300ffffffffffffff7ff25b80a9fe35492cc6706ce732eb3403b9d23fd63502ba5ed2e162d5734e4ee40675e9eeb9a18fafabbac4e0257b4c23c8597c67bcd1c44512e9a8ec8eb4bb65577ea446da00"/112], 0x1c}}, 0x4040804) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={0x0}}, 0x24000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x44050800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3777591be5fee204}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40042}, 0x4080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x1d6, 0xe4, 0x400, 0x3, 0xffffffffffffff2b, 0x4], 0x4, &(0x7f0000000100), 0x0, [{}, {}, {}, {}]}, 0xb8) socket(0x10, 0x3, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff67, 0x0, 0x0, 0x0) 02:06:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/33, 0x21}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/56, 0x38}], 0x2, &(0x7f0000001a80)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/43, 0x2b}], 0x1, &(0x7f0000001c00)=""/34, 0x22}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001cc0)=""/104, 0x68}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/108, 0x6c}], 0x6, &(0x7f00000030c0)=""/137, 0x89}, 0x1}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/5, 0x5}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/218, 0xda}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000000, 0x0) write$binfmt_script(r0, &(0x7f0000004900)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000049c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000003540)={&(0x7f0000004a00)=ANY=[@ANYBLOB="9400cc2f8ecb73c8a675ed5b184cd349b3f0e6017a0a078659c7138c458826ab365b8b6d45b623624692fb5587b4e5ad24404bc2cc957d3935ec9a47d5e828c176513b8b3f435d24a239163bed5aeb51d89be32176ce8cda1c2849f6481a1c60b8918ab709e4ec6df68175f92853fda7e1acdeda19d3a33e105311a2edc9cadc881e7aa6fde34a59182dab15b18541110622a90ebd0200000088cec212a6f2315af209c6fe77f7d1927a59cf8e4f792f1adc6dbf422d8e371906f6a220173cb292f7e0e3ca4edff733", @ANYRES16=r4, @ANYBLOB="08002bbd7000fbdbdf2511000000500001804c00028008000200030000000800030000000000080002000900000008000200524a000008000400000000000800040000005839080001001f00000008000300fb0a0000080001000c0000002c00038008000100ff0f00000800030001040000080002007a6e997f0800010003000000080001000100000004000780"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(r5, r3, 0x0, 0x80000000003) [ 551.149524][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 551.168830][ T6933] Zero length message leads to an empty skb 02:06:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 551.303659][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 551.378372][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 551.464742][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 562.712153][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.718486][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:06:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000206030000000000000000000000000005000400000000000900020073797a310000000005000100060000000c0007800800124000090000050005000200800015000300686173683a6970435a143e5e65c289150d41122c7902fdd905c67f8c8bdab11a814ddc986aaf229db911cc2ec0a2eafe42d208a884c01e2553f5e68df02e22252d52eb0c75dba46ed1daf61a2b02d85949c493473fa6b7c8b0965630e2fdd1c472e0"], 0x80}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000050001000700015d22161cc3223300ffffffffffffff7ff25b80a9fe35492cc6706ce732eb3403b9d23fd63502ba5ed2e162d5734e4ee40675e9eeb9a18fafabbac4e0257b4c23c8597c67bcd1c44512e9a8ec8eb4bb65577ea446da00"/112], 0x1c}}, 0x4040804) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={0x0}}, 0x24000084) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x44050800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3777591be5fee204}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40042}, 0x4080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x10) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x1d6, 0xe4, 0x400, 0x3, 0xffffffffffffff2b, 0x4], 0x4, &(0x7f0000000100), 0x0, [{}, {}, {}, {}]}, 0xb8) (async) socket(0x10, 0x3, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff67, 0x0, 0x0, 0x0) 02:06:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/33, 0x21}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/56, 0x38}], 0x2, &(0x7f0000001a80)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/43, 0x2b}], 0x1, &(0x7f0000001c00)=""/34, 0x22}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001cc0)=""/104, 0x68}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/108, 0x6c}], 0x6, &(0x7f00000030c0)=""/137, 0x89}, 0x1}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/5, 0x5}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/218, 0xda}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000000, 0x0) write$binfmt_script(r0, &(0x7f0000004900)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000049c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000003540)={&(0x7f0000004a00)=ANY=[@ANYBLOB="9400cc2f8ecb73c8a675ed5b184cd349b3f0e6017a0a078659c7138c458826ab365b8b6d45b623624692fb5587b4e5ad24404bc2cc957d3935ec9a47d5e828c176513b8b3f435d24a239163bed5aeb51d89be32176ce8cda1c2849f6481a1c60b8918ab709e4ec6df68175f92853fda7e1acdeda19d3a33e105311a2edc9cadc881e7aa6fde34a59182dab15b18541110622a90ebd0200000088cec212a6f2315af209c6fe77f7d1927a59cf8e4f792f1adc6dbf422d8e371906f6a220173cb292f7e0e3ca4edff733", @ANYRES16=r4, @ANYBLOB="08002bbd7000fbdbdf2511000000500001804c00028008000200030000000800030000000000080002000900000008000200524a000008000400000000000800040000005839080001001f00000008000300fb0a0000080001000c0000002c00038008000100ff0f00000800030001040000080002007a6e997f0800010003000000080001000100000004000780"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(r5, r3, 0x0, 0x80000000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/33, 0x21}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/56, 0x38}], 0x2, &(0x7f0000001a80)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/43, 0x2b}], 0x1, &(0x7f0000001c00)=""/34, 0x22}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001cc0)=""/104, 0x68}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/108, 0x6c}], 0x6, &(0x7f00000030c0)=""/137, 0x89}, 0x1}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/5, 0x5}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/218, 0xda}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000000, 0x0) (async) write$binfmt_script(r0, &(0x7f0000004900)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000049c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000003540)={&(0x7f0000004a00)=ANY=[@ANYBLOB="9400cc2f8ecb73c8a675ed5b184cd349b3f0e6017a0a078659c7138c458826ab365b8b6d45b623624692fb5587b4e5ad24404bc2cc957d3935ec9a47d5e828c176513b8b3f435d24a239163bed5aeb51d89be32176ce8cda1c2849f6481a1c60b8918ab709e4ec6df68175f92853fda7e1acdeda19d3a33e105311a2edc9cadc881e7aa6fde34a59182dab15b18541110622a90ebd0200000088cec212a6f2315af209c6fe77f7d1927a59cf8e4f792f1adc6dbf422d8e371906f6a220173cb292f7e0e3ca4edff733", @ANYRES16=r4, @ANYBLOB="08002bbd7000fbdbdf2511000000500001804c00028008000200030000000800030000000000080002000900000008000200524a000008000400000000000800040000005839080001001f00000008000300fb0a0000080001000c0000002c00038008000100ff0f00000800030001040000080002007a6e997f0800010003000000080001000100000004000780"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) (async) sendfile(r5, r3, 0x0, 0x80000000003) (async) 02:06:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 567.923073][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 568.093629][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 568.235706][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 568.358610][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 568.480151][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 568.574808][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000206030000000000000000000000000005000400000000000900020073797a310000000005000100060000000c0007800800124000090000050005000200800015000300686173683a6970435a143e5e65c289150d41122c7902fdd905c67f8c8bdab11a814ddc986aaf229db911cc2ec0a2eafe42d208a884c01e2553f5e68df02e22252d52eb0c75dba46ed1daf61a2b02d85949c493473fa6b7c8b0965630e2fdd1c472e0"], 0x80}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000050001000700015d22161cc3223300ffffffffffffff7ff25b80a9fe35492cc6706ce732eb3403b9d23fd63502ba5ed2e162d5734e4ee40675e9eeb9a18fafabbac4e0257b4c23c8597c67bcd1c44512e9a8ec8eb4bb65577ea446da00"/112], 0x1c}}, 0x4040804) (async, rerun: 32) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={0x0}}, 0x24000084) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x44050800) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3777591be5fee204}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40042}, 0x4080) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x10) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [0x1d6, 0xe4, 0x400, 0x3, 0xffffffffffffff2b, 0x4], 0x4, &(0x7f0000000100), 0x0, [{}, {}, {}, {}]}, 0xb8) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet(r2, 0x0, 0xffffffffffffff67, 0x0, 0x0, 0x0) [ 572.159393][ T27] audit: type=1804 audit(1674612406.840:111): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2507282593/syzkaller.CK5At9/47/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 [ 580.150590][ T5125] Bluetooth: hci0: command 0x0406 tx timeout 02:06:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:58 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:06:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:06:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/33, 0x21}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/56, 0x38}], 0x2, &(0x7f0000001a80)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/43, 0x2b}], 0x1, &(0x7f0000001c00)=""/34, 0x22}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001cc0)=""/104, 0x68}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/108, 0x6c}], 0x6, &(0x7f00000030c0)=""/137, 0x89}, 0x1}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/5, 0x5}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/218, 0xda}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000000, 0x0) write$binfmt_script(r0, &(0x7f0000004900)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000049c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000003540)={&(0x7f0000004a00)=ANY=[@ANYBLOB="9400cc2f8ecb73c8a675ed5b184cd349b3f0e6017a0a078659c7138c458826ab365b8b6d45b623624692fb5587b4e5ad24404bc2cc957d3935ec9a47d5e828c176513b8b3f435d24a239163bed5aeb51d89be32176ce8cda1c2849f6481a1c60b8918ab709e4ec6df68175f92853fda7e1acdeda19d3a33e105311a2edc9cadc881e7aa6fde34a59182dab15b18541110622a90ebd0200000088cec212a6f2315af209c6fe77f7d1927a59cf8e4f792f1adc6dbf422d8e371906f6a220173cb292f7e0e3ca4edff733", @ANYRES16=r4, @ANYBLOB="08002bbd7000fbdbdf2511000000500001804c00028008000200030000000800030000000000080002000900000008000200524a000008000400000000000800040000005839080001001f00000008000300fb0a0000080001000c0000002c00038008000100ff0f00000800030001040000080002007a6e997f0800010003000000080001000100000004000780"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(r5, r3, 0x0, 0x80000000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000004700)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/156, 0x9c}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x8}, {{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/33, 0x21}, {&(0x7f0000001700)=""/109, 0x6d}, {&(0x7f0000001780)=""/53, 0x35}], 0x9, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000001900)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/56, 0x38}], 0x2, &(0x7f0000001a80)=""/207, 0xcf}, 0x1}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b80)=""/43, 0x2b}], 0x1, &(0x7f0000001c00)=""/34, 0x22}, 0x2}, {{&(0x7f0000001c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001cc0)=""/104, 0x68}, {&(0x7f0000001d40)=""/193, 0xc1}, {&(0x7f0000001e40)=""/208, 0xd0}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/108, 0x6c}], 0x6, &(0x7f00000030c0)=""/137, 0x89}, 0x1}, {{&(0x7f0000003180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003200)=""/229, 0xe5}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/5, 0x5}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/218, 0xda}], 0x6, &(0x7f0000003700)=""/4096, 0x1000}, 0x1ff}], 0x6, 0x40000000, 0x0) (async) write$binfmt_script(r0, &(0x7f0000004900)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r0) (async) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f00000049c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000003540)={&(0x7f0000004a00)=ANY=[@ANYBLOB="9400cc2f8ecb73c8a675ed5b184cd349b3f0e6017a0a078659c7138c458826ab365b8b6d45b623624692fb5587b4e5ad24404bc2cc957d3935ec9a47d5e828c176513b8b3f435d24a239163bed5aeb51d89be32176ce8cda1c2849f6481a1c60b8918ab709e4ec6df68175f92853fda7e1acdeda19d3a33e105311a2edc9cadc881e7aa6fde34a59182dab15b18541110622a90ebd0200000088cec212a6f2315af209c6fe77f7d1927a59cf8e4f792f1adc6dbf422d8e371906f6a220173cb292f7e0e3ca4edff733", @ANYRES16=r4, @ANYBLOB="08002bbd7000fbdbdf2511000000500001804c00028008000200030000000800030000000000080002000900000008000200524a000008000400000000000800040000005839080001001f00000008000300fb0a0000080001000c0000002c00038008000100ff0f00000800030001040000080002007a6e997f0800010003000000080001000100000004000780"], 0x94}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) (async) sendfile(r5, r3, 0x0, 0x80000000003) (async) 02:06:58 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 583.873254][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:58 executing program 3: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 583.958853][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 584.051284][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 584.145821][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 584.246692][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:06:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 584.316585][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 584.368657][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:07:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:07:16 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 601.541972][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 601.634465][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 601.693724][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 601.744965][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 601.801229][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 601.854358][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 601.911953][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.152133][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.158507][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:07:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:07:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:42 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:07:42 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.499256][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.569898][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc), 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.625331][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.676160][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.761125][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:07:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 627.852681][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 627.943424][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:08 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 653.427307][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:08:11 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:11 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 656.767293][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 656.821062][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 656.915519][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 657.030294][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.140153][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 657.242510][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:08:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:08:33 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 679.258588][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 685.591603][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.597965][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:08:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:08:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:08:41 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:08:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) sendfile(r5, r2, &(0x7f0000000500)=0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x2, 0x6, 0x50, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x10, 0x40, 0x7, 0x8}}) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@bridge_getvlan={0x38, 0x72, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf0, &(0x7f00000002c0)=""/240, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x7fff, 0xffffeff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x80) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 686.800881][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:08:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 686.902566][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 686.950062][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:08:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 687.004092][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.062875][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001080)={{r1}, "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"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/111, 0x6f}], 0x9, &(0x7f0000000940)=""/173, 0xad}, 0x279}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/167, 0xa7}], 0x9, &(0x7f0000000f80)=""/190, 0xbe}, 0x4}], 0x2, 0x80, &(0x7f0000004100)={0x77359400}) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r2]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) accept4$alg(r5, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x3, 0x8, 0x0, 0x91e1, 0x76c, 0x74]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr=0x640100fc}}}}) 02:09:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:09:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (async) sendfile(r5, r2, &(0x7f0000000500)=0x4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x2, 0x6, 0x50, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x10, 0x40, 0x7, 0x8}}) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@bridge_getvlan={0x38, 0x72, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf0, &(0x7f00000002c0)=""/240, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x7fff, 0xffffeff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x80) (async) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 715.755813][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:09:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:09:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 727.261123][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:09:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (async) sendfile(r5, r2, &(0x7f0000000500)=0x4, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x2, 0x6, 0x50, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x10, 0x40, 0x7, 0x8}}) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@bridge_getvlan={0x38, 0x72, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xf0, &(0x7f00000002c0)=""/240, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x7fff, 0xffffeff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x80) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 02:09:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:09:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 731.183942][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 731.257920][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 731.315703][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.377485][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:09:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001080)={{r1}, "bd9c14e1745cb57dddda77bbac80ccca850c4d7fec3897131b71ba78fc426ad46bf1e7890544ed7d46918f8db9bb0240f5bfb22d5412082f95d6d47aaab3605fdd3e2981f3067a918141379c871331f9eaa96fc87ad2a7cbcf5df4c5effc958a9e938cabef696e2a3b2884dd3b8c776642bb12cf19d00445baa5280aece3ab79280cfa7860b73517377b7b38e385bae5d63559d025a53469ce5c502acaa27747eceef739c3252da726a99742cb1bd4b9e16df9acb6d98f2d9107ce12b8eac2cfa7887a0e1ec2a0a96f62b18aac2350d0a96652b71aeb9415ab7b40a967e637260941b9d3e6ae366c4c68ae700da60b5b60acd024bf4a03038521d4e732a73df41c36be1267c8160807c19e33999c5b28a0e8392c93e9713a0b126fb98b8bf28dfbe6b4a7edc7e255588cbe5ea8ef78b75605943f9bd3e941bb6d9624086d4e01672351f7657e04589e43384a883fbe234d9f0f6177df5e64a46c3b84cf48e88224d68e96570311783e92586748a17092e51d8316c11b51df8f5bf6445729219214711ca8cda4b1c9de72f15a4a1ad296f78711bd22c496617e06ca4031fca274d1716b6d84b1a562f719092fd3f8db22b4866ffffeb12e48268ce3513ba6aed056bd3fab07f97d28d3e92bc47b519cdaf5b6e75c2e875b22cd483137b11612d070dce106213a070908ddcb0a78e3b08c0074fc368827de42c76df90405f1025131499a2c89f3f2a099a649b55613db20140079d6e96c381dae53f27192ec602796e6627de4874431c4c88b52cdbc1c5d5bc2b53fd5db9a0165e086a6b8652e4a1eb68e906f7a22674bc88c82407e9428619a839d01e865779e86d3b424f2707bc0628083be2d5d3b3e1b27e8049b126d8e72567acfee172deaf80a55aab275db83cca7885aaf9998701ee8af0059691751c79e70bbd5d447a0b2ec9c0dab79afd4200905c49d5518a2b6a3515363f68d1d403ae63f2c7d74c0ecdef82c69837ab641315f686ddb6971aa691fdeb30df08c688c587c0b3e38cefcf417a826cac5e7f02e4813649f939d488115bd6cfce805c9ad07ac56a4d666580896adef2b9d7bf8aebf5cb6cf05eb5fafc51fd9aae3bf2af65006192183a867b9029f18e283a98e0f97998915a88060de9f95e2bd098de99e7c68799cefac0572f23805e2259f15959bed0b48e66a1351934cc3c08ff6efdb4eda727ea78920afbf297e73b15e20adeb6617f06c383db96d51801b1164fa8e136d3068684daed5b273f7280e54431a4341b1446fb9a957b3452269cbe0180b425c44f155060742f11d4e5bd13ba3bf03efbf2d728ad8fd75dbcbcec74ee48181e42201fa85de3a739a3be51b63abd791e951a5bb07195327999dfc68983957f37bba4d6ac567efc04800452162a81159fc2ed51caac0563e317abdc14df8ae510caac61d9a6888b2125fe0cd59703632b851b99bf06f88dc8e8812e023eaf7ad718afef591ceb0ea6cceaa00a1fed6fd498342f46dd32b34543cf3d83991ea3e1ff4ace3f1b2988fb6a7b22de66ff0bfb67083a5cd7710ead6e992e29a9c4c1ec3cb4d1053631856854f15f1d8901b6541cd12174dd3d506d2059e87b1d8f796589f359fbf2baf4c59b1a7b1f8c677739ab1612d30d901a36e8f5584d00982ef1fdcb3a95040500f18746c88826fa87bbd7eac3c1d9389836fb177bc6bbe41c0ec5536ccf85e8d21674c478f29ce6840af415e4015acc63f0fada8738dba26a680017e90b4116ffeda0e787f3440c2b2a21452be89ad17ef1ab21797e90019cc2fd07575cf965d63eaaa2992e257fd72ee62c368d33ebadb1508ecfe0e9357765f35c67988cf68b4451103c921544a601b4df470a0fbed8f9d79bf37692d56530988bc11f161ead35b1e02dac868dafea2bf88492b72c855fcb38fb8f693769c165a46e9fdd50ebdd901870ddb485ca8d492d0386f032938302f33d41bcfe1217f6251ba7f06d6741eb5884815c16f90206e47b5009dca442e16ba359b9642e0ed37a10d33a3cc39a850b5f49a66a56ffa67c21ebca1d49dd3d80363775ebd83ed3b25355ccd52b301e262d5dc18a9a7d7dcc26f09b1cbdea2835eab89b7e2d57017a9acefeb5f393638bbfdb6a7fe6758c47138390bc5b42144da599740821ef7936958c6cc9f343e7583533aa804098c5c42004dcc0c382fb971777664d8e295f05c48470eb15416fa2350aae52441c804f1cd93dcf60151417a9b027848c51b68b8b9d88fbb368fe39a21df7a875281dea466d147a01c4e18e04fd377b9e6a968dc22b2b425dab5dc80e9292dc62feecff6375986b29d46ece2aaf8d3f6cd33d288620720ee9506db30d4d2f2cc2ba5c157be8daa3b2ab1128dc2d900ff8f84cc513968982d81ebe143a0a58b56f95170dc6e85438da2233a335090e684683b48781682d4f859ece8cadbf492c3ff51ff53730831d324b9a06a14aed3af02460c7c819bb8fd248f4a355671012a7d86d144da85f08ecdc98bbc8b0739961d430c6dc178891bdd288dcc5cc840bb409ca3cf87eb504f0fe6b531ef117c68f15ec3293a5edaee748576489b46dea48724f33172f50d4dc001bf6eb10ad08ca4424695a5de02dad010cac1aedbc52beada6d274167ef7fd5e8a77a8322f947b723f75373fd2eab8ac777aac2a6d1e9a8496dd1b0616c8f3ae3a2db8f7d80a32565b4497e06c13bf7af4ab503ff4233111b2843285df5af8b0ec5129a022845d6b361d24820787e9648b3ed562ab3fea24e0d167cac30ee29347b9939341b276c54975ad944930167a4aa480f99ec8e58fb0c81e719ab0d288920bce6aad5b44362a2bad27adea6f2da41e87fd61e63cf708ec27c1f65fd2c3b4a7fd0edb3e117b427df787e522a371e7f8056f1aca89185062a2a634c26eeb62bf143bb86c3a87cc2d92b553e0350f2498b0d07bb233fcd203232ec29b990f7e421d15229b4149fcda0205e544783f8bcbd25580838e469b37eceb0a4b7fb14ea2459ee5ee3227e44c6ed0d0624be4b6cfab52b2602d31366f7a1400967da4339ef21267fb37e99a6b618bf13c1a63507f28574a1c16b2a5681dc5afcc28d3929e6b87b47084e7ad3e11bb8192b3e6fa9e7f2148a7bc7b458c7a490c094ccaf2903c0cde39aa70b2b30c830d10ba306b565c266fa4b163b4acfb35ff6314853865540e28fbac22b836f880708401304b9f58fd877005a04ba61487db50857056804c27fd5ade89bc1c72a144de7e80d7eeb255b43ad3288919664bc0cf54d7152cf103d7515e4dafd1dadff5ba513d78107e5d67e8614a8cf35e25d2963bdf15c5e39e1b7bd694c4aa2cdebea4e48db2c3b92d27da63ae6e3a82511ed22110fb548c45eef267cf0d674f758cc81df89e147ed99a99f80c64dcbb23d5d150a737c5b0c31931760973ca1567c2e7ded518bd435ffca06d772cb19ab260cd4c266a3b8fd55014603b2bffc60df35cdd357fbd7c27da731e2bca215490b38ef14e5ea2c09eb5c419fbe08cbc5d23b4b5b445aebaa92b78ce415dddc9135c00cee46e144e2430a20b0ca84c9d5749beee093098a548316a1d5ea6eaccc7eb6934ed91654f7b81e4db4bbd70282c0fb4c510bf2be2e767e78fcf5b13d735a03761b64a7b81f4183b001cae26bdaf8bd739af8b96168fdccce10f15be537580c842e339467b2bb8bc1e8b762a2b0c0041c3dffd9dc345744862ef70fc6c233e8168a935bfc2846b4955b62c65c26783b2441918f0c39710780ab821b01d8447eba380b7a2402735d521b429f7921f041ae0754ff8a63c755d3e581ca6f8d7f35be74d1725d265fb3dfa6a512ec77006e90cc7f23c910068de5afb7318ead049630e2bd7b54c62060c9af26838f234f2ff63a81df9f5830ee2f5505b6aa0bce3a168e94337b12294636268acbf59ba4f66741f53866b98404764a074c6124d23728280979c1069c8b651ba9cc8a64e6a9f503f8c108688233e5020c837b934355c8fb7b0eb38c1211268327257a6e4566a77cd0c96a1f1a8c99ec4c9995cbd12906c7204dfa44f8b78ef99460e4ec3f992088e82823402abce5c6a219aa1f66c95c21a5039c5b0a052c22efbf39db0f1bd124087e80576cf3e61decf92b18326d89959461a04aaf87eb5aa9a0c80133e99291b91360fb81fa72faeb7881d74a53fe9f64b2386b1a85be202f23975b77ce7e99a10c0530a306eec68a4e38fd6422809f82c7e727002c09d6862c28e6798675bac40569ee70c0e08ffdf236cd80653a69b6ddebd1ec484fc692a60c263a4c28671a69697add301ea9f1a4761ca778b8cde5ae36bbbaca08290a03ad4059a00a7f23e13b3eadcd6e22bdbe15959cd5bedaed25caf3c4c3d3a40bd8494ece8eb10c5667b945449ef53b6003b6af2f5154ed5e14abad2a3a3d6470166e0a66bf0a99d0aba27e5a998d7868402d62a3d3e8f99f3c20db5e7770a19da59b6b1bb21b6713643112da820122d32d3394de853635cbc19dc1db1df5b1ff57d423d6a607814ff6c99d167e98ddb68ed7200db818c52521c51b8643e2295d8d2842db6691fd7940e790b0a1b3b62ff6e5cb438d5811f59e354be43961518ce675b1388864112f8f01592e80d88cf188046c6534bf8134e808dc4cc2dc232f7713270e2e6d8f684140b326c02ed09001348c5bf8c1f9d9778fc82ebdd6c3bcdd1c768b384537f0afbf3d499f7abf5a98b0b2d68a83c8fb78a85c9f767d94a54de164c5920f40ba8d7dfbe2f419d85bb5e41788e41c4640d179e28b7ac58006569f5ba596934a26c4ce30b1a08545b1d23a41418ee8141392b13e0ac0b53645f2a4130c98d6e0baa7a5a30f447a7c241939dec1e4ae9676c6f14324000628474e9b78fa850207ff35e0b74d7409414a9523a54ddc6e28cf4a3ac255a4782c3e9a7b16ba2d4101ee4961efd76c0a854308ad8f0c38873700159bf195ddc3a27669d1f4e714b1618f75f5a23fcb564e4ab7fea81ec11ef873d0d9b0e01adb822cb9893756f7c6799495e48ad7bebdc79bb14e5d7b0dced141a1ac5b39e5e05ef4285cab5bd9926206dfa733ce1c836012f5da80990bd7c8ffd8d6bf6a537501eb837f2a394c4447cd6467181c7f067b86dc1b62ca00fcc61da65e6a4331bbab7f67db1e64b04b36afa94c5613a924b6247d7347d45d6479f95c8088fab9ca8f485f1294e14c0d0bf64ed05e0c78e272f55a8841e8cb73c305859b6a67e2e985556d67076c72f104fd2f0c35e2193c672cfefdcbc94f72601cabe30bf28bd97a57b99f896557763fd372c8955be21de06d6bfd1fe9a227e03e0f24bf67480da82bde74c841289f9b9b3228767496ff97d0a9fdb07a1d4a7d232c36d1bf357c56a61edbd44f26436eee3d6def2f78f8911103da96f06fbdec9a5ab16bcdb9e81b55c4f32ac40c0b471128325cfced9c1054daf4a039b4ea87003c2a8c6c306e104687a61309fd1d07580031053f42df6789eff0e45ef8cd7930d641b3dbf8a235f399032a91378f65075e5a852b72014cacb3f4371725aa25ae3f717a14e96de09440f4fe7f19955428b899ca2875792427f911e91e641409849eab6fd48a0c87c0d7bf4ed4f80b2e5183807d5f80ba443a3985f0ec89b931d6771298b0a89a42becc5aa2615d9a9825eadb94ac77d08b4c92fae1174d6c8ad184b0d255101962d3117e09b8bf82e287e4b23304e1c532c164bd35adf0bf16618d754c777abf47e56b22f8367d2549b304e48446c876c7ecc9c428b1bd4f13b829ffc394a7a4362c8d1a95"}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/111, 0x6f}], 0x9, &(0x7f0000000940)=""/173, 0xad}, 0x279}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/167, 0xa7}], 0x9, &(0x7f0000000f80)=""/190, 0xbe}, 0x4}], 0x2, 0x80, &(0x7f0000004100)={0x77359400}) (async) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r2]}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) accept4$alg(r5, 0x0, 0x0, 0x80800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x3, 0x8, 0x0, 0x91e1, 0x76c, 0x74]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr=0x640100fc}}}}) 02:09:34 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 739.506846][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 747.034248][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.040696][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:09:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:09:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:09:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007ad000/0xd000)=nil, 0xd000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20000200) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) 02:09:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x4}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:09:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001080)={{r1}, "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"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/111, 0x6f}], 0x9, &(0x7f0000000940)=""/173, 0xad}, 0x279}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/167, 0xa7}], 0x9, &(0x7f0000000f80)=""/190, 0xbe}, 0x4}], 0x2, 0x80, &(0x7f0000004100)={0x77359400}) accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r2]}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) accept4$alg(r5, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x3, 0x8, 0x0, 0x91e1, 0x76c, 0x74]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr=0x640100fc}}}}) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001080)={{r1}, "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"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000004080)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/195, 0xc3}, {&(0x7f0000000800)=""/111, 0x6f}], 0x9, &(0x7f0000000940)=""/173, 0xad}, 0x279}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/200, 0xc8}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/120, 0x78}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/167, 0xa7}], 0x9, &(0x7f0000000f80)=""/190, 0xbe}, 0x4}], 0x2, 0x80, &(0x7f0000004100)={0x77359400}) (async) accept4(r3, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3, @ANYRES16=r2]}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) (async) accept4$alg(r5, 0x0, 0x0, 0x80800) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x3, [0x3, 0x8, 0x0, 0x91e1, 0x76c, 0x74]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1f00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @rand_addr=0x640100fc}}}}) (async) [ 763.516685][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 763.617328][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 763.680777][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 763.755937][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 763.809596][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:09:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 763.900084][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 763.976598][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:10:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b", @ANYRES16=r3], 0x28}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) 02:10:28 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x103, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff2}, {0x1, 0xfffb}, {0x0, 0x1f7b1682f8bf3c16}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x800) r3 = socket$nl_crypto(0x10, 0x3, 0x15) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x5, 0x5) r4 = socket$inet6(0x10, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) write(r4, &(0x7f0000000100)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 02:10:28 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007ad000/0xd000)=nil, 0xd000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20000200) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) unshare(0x40000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00007ad000/0xd000)=nil, 0xd000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) unshare(0x20000200) (async) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) 02:10:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.519398][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.570710][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.625162][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.681493][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.737986][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 793.791055][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.847559][ T7247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 808.472189][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.478527][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.316967][ T7254] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 814.372810][ T7255] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 02:10:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:10:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b", @ANYRES16=r3], 0x28}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) 02:10:59 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x103, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff2}, {0x1, 0xfffb}, {0x0, 0x1f7b1682f8bf3c16}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x800) r3 = socket$nl_crypto(0x10, 0x3, 0x15) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x5, 0x5) r4 = socket$inet6(0x10, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) write(r4, &(0x7f0000000100)="fc0000001c000705ab092509b86813000aab080102000000b85b1093210001c0f00b0848050700010000000000039815fa2c53c28648000000b9d956620d7a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f0000080548deac279c", 0xfc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x103, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff2}, {0x1, 0xfffb}, {0x0, 0x1f7b1682f8bf3c16}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x800) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x5, 0x5) (async) socket$inet6(0x10, 0x2, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) write(r4, &(0x7f0000000100)="fc0000001c000705ab092509b86813000aab080102000000b85b1093210001c0f00b0848050700010000000000039815fa2c53c28648000000b9d956620d7a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f0000080548deac279c", 0xfc) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) (async) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) (async) 02:10:59 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007ad000/0xd000)=nil, 0xd000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20000200) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) unshare(0x40000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00007ad000/0xd000)=nil, 0xd000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) unshare(0x20000200) (async) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) (async) 02:10:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 824.976180][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 825.038966][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 825.093647][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 825.148952][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 825.208620][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 825.254080][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.304200][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:11:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 834.228166][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b", @ANYRES16=r3], 0x28}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b", @ANYRES16=r3], 0x28}}, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) (async) 02:11:17 executing program 5: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x8, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x103, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff2}, {0x1, 0xfffb}, {0x0, 0x1f7b1682f8bf3c16}}}, 0x24}, 0x1, 0x0, 0x0, 0x8004000}, 0x800) r3 = socket$nl_crypto(0x10, 0x3, 0x15) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x5, 0x5) r4 = socket$inet6(0x10, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) write(r4, &(0x7f0000000100)="fc0000001c000705ab092509b86813000aab080102000000b85b1093210001c0f00b0848050700010000000000039815fa2c53c28648000000b9d956620d7a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b29d3ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df77bc4cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f0000080548deac279c", 0xfc) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x38}}, 0x0) (async) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 02:11:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 842.344404][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:11:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0189436, 0x0) 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:11:40 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x4, 0x0, 0xdc) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x9, 0x9, 0xc, 0x80, 0x1}, @map_fd={0x18, 0x4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffff8}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x10, 0x40, 0x6}, 0x10}, 0x80) 02:11:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x48) 02:11:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.445089][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.512182][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.574867][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.630283][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.688490][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 865.748134][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.767274][ T7318] sch_tbf: peakrate 16777215 is lower than or equals to rate 1745169492 ! [ 865.815155][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.834478][ T7320] sch_tbf: peakrate 16777215 is lower than or equals to rate 1745169492 ! [ 869.911949][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.918248][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:12:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:12:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:09 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x20}, 0xc) 02:12:09 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="e5", 0x1}], 0x2}, 0x0) 02:12:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:12:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x1}]}]}}, &(0x7f0000000200)=""/130, 0x36, 0x82, 0x1}, 0x20) 02:12:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001010000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.071331][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.092716][ T7342] sch_tbf: peakrate 16777215 is lower than or equals to rate 1745169492 ! 02:12:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001010000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.137856][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.157437][ T7345] sch_tbf: burst 0 is lower than device bridge117 mtu (1514) ! 02:12:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a000002000001010000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.201311][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.219617][ T7347] sch_tbf: burst 0 is lower than device bridge118 mtu (1514) ! 02:12:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.266741][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.284303][ T7349] sch_tbf: burst 0 is lower than device bridge119 mtu (1514) ! 02:12:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.329094][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.347380][ T7351] sch_tbf: burst 0 is lower than device bridge120 mtu (1514) ! 02:12:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 895.391612][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.408969][ T7353] sch_tbf: burst 0 is lower than device bridge121 mtu (1514) ! [ 895.462658][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 895.478845][ T7355] sch_tbf: burst 0 is lower than device bridge122 mtu (1514) ! [ 931.353091][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.359413][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:12:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:12:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:12:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:51 executing program 5: r0 = socket$inet_sctp(0x2, 0xa, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 02:12:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6ca, 0x0, &(0x7f00000000c0)) 02:12:51 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:12:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:12:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:13:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f80)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdrdstopts={{0x18, 0x29, 0x2}}], 0x18}}], 0x1, 0x0) 02:13:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x14, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x90) 02:13:03 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:03 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 948.548037][ T7398] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 948.599854][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:13:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 984.624054][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 992.792192][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.798515][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:13:50 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 02:13:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f80)=[{{&(0x7f0000000200)={0x2, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x8012) 02:13:50 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000011c0)={&(0x7f0000000000), 0xc, &(0x7f0000001180)={&(0x7f0000000040)={0x1151, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"/4096}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "f0c238d303bd5dbbe9d88fa426372266dd8de5d4a6faca7451b251bc8f0a6b7369633e2921fbd5dfe7923ca9993163dc391e94416d3e4904a5dbb2a0ce4d50c141c8be3ca04dfbd893aa9816e560fdf5446c58781fe00606e4dc786ceb71d76c80d4c8ae0ae5fc59300eb4c57c4d6861f61d28fadff1191486"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "6de25a1efdbc4c5ac59604b4b1c7238fe08cd9d84b61be5eba44d9c7d81aa59b1d329aacf9b457f1cb2ec4609f82f337437ae2094ea9c8e9fbb0ce3b8ad8a35e769b897a7551808b715c961e964b606bdbd45e90d140b37878eec1e6c22146cede1e19c4da65e230ede009eb0ab9dc5028c8d5d3763c195dad395d8b33d9629625f28c905394"}]}, 0x1124}, 0x1, 0x0, 0x0, 0x20040084}, 0x400c0c0) 02:13:50 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:13:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:13:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 996.188859][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 996.246818][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 996.293146][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:13:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 996.336558][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 996.373251][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:13:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 996.424602][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 996.469920][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:19 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4d, 0x0, 0x0) 02:14:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2b, 0x0, 0x0) 02:14:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:14:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:14:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000025c0)={@empty}, 0x2) 02:14:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.296873][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.373481][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.471787][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.556961][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.640925][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1025.716393][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1025.806395][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x1}, 0xe) 02:14:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:14:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:14:38 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000001b00)=[{}, {}], 0x2, 0x0, &(0x7f0000001b40), 0xfffffffffffffda0) 02:14:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1043.656598][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1054.232028][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.238335][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:14:52 executing program 2: r0 = socket(0x23, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 02:14:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:14:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:14:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:14:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1058.152718][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1058.261900][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1058.336193][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1058.435135][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:14 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @loopback}}, 0x24) 02:15:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1079.975503][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1080.038111][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:18 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x3, 0x0, 0x4) 02:15:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x3, &(0x7f0000000780)=@framed, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:15:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:15:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:15:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1115.671798][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.678148][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:15:50 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:15:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:50 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:15:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:15:50 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:15:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1116.259749][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1116.306188][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1116.351501][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:15:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:15:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1119.170122][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1119.219211][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1119.269415][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:16:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:16:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 1137.907271][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:16:26 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:16:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:16:26 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:16:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:16:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1151.901283][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1151.963514][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1152.015496][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1152.060100][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1152.107426][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:16:40 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:16:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:16:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1165.828895][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1177.112545][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.118897][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:16:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:16:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:16:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:16:58 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 1184.048528][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:17:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r3, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:17:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1185.488641][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1185.538942][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1185.593818][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1185.643106][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1185.698162][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:08 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:17:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1193.813967][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:17:30 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:17:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:17:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1216.132988][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:33 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:17:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:17:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1219.113650][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1219.179628][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1219.238974][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1219.289723][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1219.309587][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1219.356252][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1219.377603][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:17:42 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:17:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:17:42 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1227.491551][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1227.509877][ T7656] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.552667][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.559035][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:18:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:18:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:18:00 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1246.252263][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1246.274231][ T7667] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:08 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:18:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:18:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:18:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1253.333251][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.357881][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1253.409131][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.429124][ T7678] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.480543][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.502751][ T7680] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1253.591728][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.609964][ T7684] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:18:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:18:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:18:20 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1265.824457][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462660034000200080006"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1265.868487][ T7693] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462660034000200080006"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1265.958736][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1265.978861][ T7697] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1266.031659][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1266.049501][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:42 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:18:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e0045080001007462660034000200080006"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:18:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:18:42 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c6be900100037bb93d0354858d73811da480400", @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 02:18:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/835], &(0x7f0000000100)='GPL\x00'}, 0x48) 02:18:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1287.586752][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1287.603795][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1287.655821][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1287.676827][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1299.992796][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.999193][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:18:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:18:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:18:56 executing program 5: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c6be900100037bb93d0354858d73811da480400", @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 02:18:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:18:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1302.130669][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.146692][ T7719] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 02:18:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a423000028"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1302.194141][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.215897][ T7722] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.267093][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:19:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a423000028"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:19:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:19:22 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c6be900100037bb93d0354858d73811da480400", @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00'}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c6be900100037bb93d0354858d73811da480400", @ANYRES32=r3, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) (async) 02:19:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/835], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/835], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 02:19:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a423000028"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1328.088666][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1328.169832][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:19:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300002800"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:19:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300002800"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1334.215858][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a42300002800"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1334.268959][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1334.345140][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1334.397761][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1334.421875][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1334.464329][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1334.492438][ T7755] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:19:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:19:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:19:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000801000000000095000000000000006926000000000000bf67000000000000150600000fbf52004507000002000000250600000ee60000bf250000000000000f630000000000006507040002000000070700004c0000001f75000000000000bf540000000000000704000004000bffbd350100000000009500000000000000050000000000000095000000000000001f1bd1fe4b3af9c97925711095cc1a3a25b9418ffdc4a1da470a14e4391c3fb600100000a4911fe82664d775cdb9dfc83fa32db39b636c1866b526ffff00005172a74e9afe751664f580a6c5bccf1ef6583e0c1cd1f7fe416b5d6902e7db826e6dffda3aabdc5b5ce08ca4ee6035f1b7dc6b3b4672f7c22efa888aff6f3eb7e962160dac2c68c044584bb50e9c0952bab14c2c65176c7e40faaea21457d5f2d6f40c4d3390a1e14561cbf0a6ccd15f45c52753e24c6488b23ec9a3261c7706cecfc37b25b382c76671983e053efde84f80c5483d26bfaa66bf477cca77d399c76469551913f98a26fa0363ebb7f861a3d53d4dd6d91f7dcefb0748cd20346878bc0759851cd32ba781d6e62e8eee022be7fb6fff27871a5a7a723e5e330f454f0c568fbfc9b901bd6cc3af8355e5ecf3f74a472c7861beeeba7d5d25208a2e1d4c0b8e4f82ce05ffe1c69aaea312bbb3656c873b26161dccd130823e87d0b411e6fdb2cc4def13ecdf4217c09e803c9dbaba0cd1036081842b7fc3a30759c24058ad22001bc2817d4604b82d49bf9d4acfabc835b52e394a397c67321a0dd4ac4082ee583de98e8a89535050054d40a4dbd809d0ce9c44c286b5d5a51d933d35714d8ca7fb49b5329107825926fd5caaf4ddd1e81e616fc56e47530e51cd558d630f665a88da23e96c45a0a4ccd554a92628336eb43de1022d60e5ffe41b6bef61ea28c5ea09a832f9f84b10aa4b6350930b11865184fce06bb8bf7d3440526aa2055daa7945db10e7c2cf517d954fc2db6cdee34cff68b43fef6205f2cf390e1bc4ee8ee0b5f204bf70fd650767ab730b1ffe26fa64ad5c1dced0e403d5d6845b4821b4e23da013cae5ccb69dc52c67ba115656de35a86aae131c9ee3f71eb1c67d6deb57b0bb40001000"/835], &(0x7f0000000100)='GPL\x00'}, 0x48) 02:19:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r2, 0x0, 0x7fffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) sendfile(r3, r2, 0x0, 0x3fffffd) pipe(&(0x7f0000000280)={0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x84}}, 0x800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf2505000000080005000080000008000600b73d000060000180080009005000000008000800400000000a0006006c626c6372000000080009001c0000000c000700070000001a0000000800090011000000060004004e21000014000300fc000000000000000000000000000000060004004e21000056ab4eb5aa334133a0a016b883c55a1b6879a21e0c57da049362093538cf535313581acb7e836d28d0a7a3568c61986a74240deefe6523e40d86c210c4683e6e89318dada39d6a16242e61cd3625a87095e24485dee0ec8de706da4e75f89f11b881fdef5cdd379bf7356d2927093fe6a73875"], 0x84}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r8, 0x908, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 02:19:52 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:19:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.142275][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1358.173512][ T7762] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.213476][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.277418][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.325133][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.372033][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:19:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1358.441442][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1358.492737][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1361.431728][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.438080][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:20:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:20:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:20:26 executing program 2: unshare(0x6c060000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x0, 0x0) unshare(0x80) vmsplice(r2, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, &(0x7f00000001c0)=0xbb2, 0xffffffffffffffff, &(0x7f0000000240)=0x10001, 0xfffffffffffffff7, 0x17) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) unshare(0x10080400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000000380)="098cf564027dc6b3b8a259f9681196410ca586fcc79f6bbebe3ce1ada5e86054d5", &(0x7f00000003c0)=""/14, &(0x7f0000000400)="77873530c04b429fac2382961ca3cc2d14a9f0cea55696dfdcd9cc1f97608639f799fc366656c1dafb6d6cbfba4181f65433941e41508b5b22ab12c9f948e0fc1a526b1036907e9126ffa1f61503ef443a98bd483af51defba2b25613ebf6753c2c9c087f0d079c7c8034330a1d6bc84512dce0484f9037e57af53eadaa4ef930d82b439c53e637295123d86638ab69a0eb7ae8f00c906c419e735375f1ea08955dcd9cb2bd66f9f3ac969f290404e0ae61656701aad1510135041dbdb44e814c55c7fd70e5136145f2d315fd1185aaab0cc0e03f2d02b528742c0cbb5cf11df8ad7fd1c2f83ea39b789b721370f886f1a3863b4f468b885093a84594bed9c02f935248927e5eb01bce6b95309056c5c57678ef5db103d65d739e5f296b9d5e40cd4a4091efe2e3a72d0ea88f0cc98a7db10aba961bf64fa56bd1408b3eb63cafc247c2c741cd6159c63740dedea07f885fcf4f42defa328247434ab0d114595b1a34a084581a21c757ef7adfdaca97c328aeb2da3432023f2ccc53d45c9304ca7d5530a9c4c4d9359e539a8e1a09845df7a6958a9c89018ea317e858c9cad7600a5b2d3ad5be50bfea5daf43d2ff2e35db04fe7a1b3308c38942df29f28faefe51b31aa45cffac1d6656c6f5b2e76ea7d322cdf3767bf73ee1e94b00eb3d9825e3e3392b6b4b90198be0d149b5bed0e570e3457e8cdfb2e58648efbe16965b53aa74b16487aaac3f909d7ac0b3e671bdf1fe9142825e035e8e62586f5f6244fc84ca269af3690a4344a63e6ca6923853857b89312bbe24f43fec64e8a6e934b5f7e69a5117356a607fb4310d053562288380629d15d7d2bebc5eb838e5fba7e80ba2cb540708f504ba60b504ed93f593fa172ef5edb617ff6429d8e0d84e6a0152ec05283651d1c915e8c807fc6c0857f3cf4945a28a86f3e6bae33f1c29db3984a8ba0e92759b6178c2894897ce1e70ebeededc8ca4a9f37240719b3a583b5ad1e3740b81a7bf98f7bc4cec95bad4b1cb41fb5a3494e5270294f46134bc1836d316bf21d9ada55862ba5f83bc44ee73a0ccd335cbd79d2e9cef56c333ce543eb30da602d586c36f7c1561e3b2f744bcc911765c35d8abe143be5b3f1f3532d775ff6f8665f3a3f631945f79e50a1d41cd7509539db8917e7f51618b5dc49ae5c3674e716fcf599d9fb20fd5e13dead84c3325e0dc9f85fe08b558efd6c554f57adc12d0fbc5e3911a418f488fabb12e50eb008c67dd566893199a10a24bd4b2ee3ab91ed8d16d350e0cb8e5ba62bc2b0c1d82211e75f73d9a5673f6be391bca9fb6868b1313e44d3b3799b1df8ba22af8d3eb98f8d4f7d2b4c3835a6cf11928b59c6336e6be6c01d2fd105c55c21b640984bdb83d83e6dc655b90a97faa8552170bebc02f0dca737aad231e7ac91a1fed68a15baaeb3c58604b13294e83b4e8dece07a8f41c97878c4c2329c252042f33b187b145ee4a5cb24b4f647351f5966fd3b5d35be1f602380aa41e167ded05fa43f2e5f25d2295ef8ca54aa78d3ff124f690649f3dd21d6f50ab274a2eaa0bd918d5db4122a4dfe67f60267c3c91854cfd97ad8b88df268b83860cd6588356f41c2e953eff2471f372b0eebac4a835e8877603e56220ab0ed17640b2ea9f5a3e677bd4ccfdc5ad2162f56fceff18b401a67ea95688d666f1cb63793c2051af5af253ac62e5c290abf3608fad7763adddb437e291edd9b24379d870ee5285033fd48250fcfeadc02bbbedf89acfd37e501ebce41a1f4d0cc52d539d1577f2791150519e4aa601b13e5ddc3f3845f2aeb8976743c1365cb51ae983aae75cf4a0d7adaa945d9e0019c7fdd76d820dbcd602b7bd0969057732190f37d51f5813b0d86b3dfa68310908a73c7be8ca3ea4b02cb975dc93a7a585403f00518f8600d0ce083c6c4c2c6c6efcb613dee59e6d6d197f1bab52148220e55863132db0f96aa6c359dd86376a22d4e6b295421920094663928498d2f5660642eca5e8c81665bae1db13cc86e0affc705cc4055dd062c17ce8db94169b655f3148e69da9c764e737975b48ec86ef2c4abb3a4e8125dc7b6dd35f725676ece22b3bf02b5ea5c498ee309fcff8467ccbed8a7abcc315734de8f36b225a33bbdce491985b56eadf8bd24fdb5a115ce753491411c62142823fa7eb64a23ef34cf8d81fabbaea70eb72a4206018c9191188ae33f09bf075ba3d3ae48142c9afe306e84a3d3f9d61c66ab07ffa9d4fd1dc8da9a8a77f94aa2abcb43b5d0832b483a5da5af6a1e44e9228de0510b7dff005d053585ee5447edfaed5b12078d3b3e8bb2fefe630e9bda11e91206189ac71347c34bcd6751357694e6ca6a5bf8c49a23d78f4d9032f2f1a5d494994d1bb78d4f2bb8d942318c94b6c4b566a519e944ff0979796f2bf69a97b974839fe48f681d4bf57c5133f3f14627ed512d418031262b2479192c1d819e89a03025ea6c86a6f9319e6b4d3949e4c1ef22601f093554e422e4d555c2d53dab9bdb068f807651ed2446087740afc85fa7b965430884eb2b6b2403227c09d8493445e5a74df9f305957bd232e885eafba96c25df28b6c8b511f22432103b59ebf8be18ff099cb9ee4d0e4fd031bb1d517a48a09ea4ca6f9e136be2f721dbb8b0e42760319f3e2e17209934c948307399011d65704951aff640e3fbbe9e5468d496a0ece88fd7be6829d61e3edcfc058cb9a896700de8a43a419dc3e88d43fc47c571ee6c884f0eeb951cf07b7df4bd3c315ed3c8730b914030d1d2a33e98743a8a7a296be0d910614667d35502c73189732aa5e8079ebea37c285860c99d5e7bc4c6b5a4e4ad7f9254789aab2cb2e7d7b1e9be5441ccebd4c3902becb394f701732bebce2909fc59b06339b35beeec0b39551d6f45d56a667b8d21a5ed8e2241d55b482eb2fa4896df0f0d167f43c0b67f2b6a4c161b1ca7c49831bc8f3214ce04a66baa46f574a15cbcbe5689441ae821aae3bc3ac76a0308d2c3be7e2979414f2feab56c1afe01df30cef71f45d636672f4b4f656ecbaf11dc47dbd8005bb69f02a9f70261db92354aa303194127171cabcd86e6bf45430cfcd0f55a42a80d8b637d948dd6c33ec5b8970d8b380e3ffc95f519b4c2acb49aff3a35659f819d8e3cdbd2c9d011c6c51f2519913985d04c920864a96b8c0e5fa9766f2f13b0448f8cc46cfc4e610a71e4798dd65d8429e620be793e07850edfe5aa8c9dd2867c70ff0575e290f8a4ad06c1b7816a59ad681844d412281276d3208e304df3a7618ed83aacd8632060e2cdc1149733b61093029dc85fd9256d10f83c2b971ecd61e7a415d6d3bc154d4630e56b0574f303f165c575df9ad997853212802bc6f0b6c4273a64338cb48f49114a046d478920fbb473f23957456a26e3534a00f88f0a7c4cd798495974602be40f3061c3fb0422c4e1d2aeca16ec85597cb33e722d20d535aad623a0ae93515ccd02b0789422562c01225efd74d6aaa8afb9e943e9f3675cc69457e2d9cd4dcec98366d83882baf4ad252478c651a9c1ddc36efa0d1c70397a973c68d4b5e57ee8526b35a06aed26fcd254a089a2a835cc06d0d3a4499bd48c46c94df21a2bd06128815a0eb8da43c7788173d0287580a90050f5a4e327928325ae238959dda67690f77f7c1a8c33c1414b97079d883a2e8ab2f5af7ad648a68176de6b7ae6aaa469de7ff57f4aa6f956a3bf91d9de711d99fffd76672edc33ee7edcf48afabfe56e6e18d2290be1977f399df2301d6ab737928f885e7c44e326ed82ee257934f9d38ec1af0e35e699edb4650139f85ca19e62759100aa8e6e27c7236b73a943af05f8595b4ecbb9f2e59d8ea3b766151a4b2c29bae35240e16e3c5cfe5407789fcffebf7a5123b2ac2c022391ebaa95aaa184c18ed88564ebaf86ff0afb9b4dc4f605961129c73dbf615782abe1b1b673429413432ccd6bba89a917df4e5b3f42573fdf13a1df90ee400876018d1a6606c6c803f89cf4b6169149923a96489b993b39d5c5f1762ff72d913a31e9025415a6a4a8c30ca650a0bd8faca1798101c804e8361e969a95c2e589fbed4b5f9137423b65fb667e501bdce79b633edf9f299e0359abdf7f73b146179152c7aa89ef3361157a6102458e70e259fdd5fdde7f4e6b489f1b611a0c42ff13f0fe1eb65f91f15b2296b34bbc6da9c9b34769dec7a7135678836670034ec2a0baf1a5bbc4dbcce80f1f76051d2571511decc9b0198892b64ab598c6331bc682c625385bc2a0c88ec9f69efa4bf5867683bdcfb9c60b6580c5b19d66369a7a9cec90551800036932b6e65f7214e3010615fd3d7fb824bb28359958cf8d18871eee89f70bf82b9b29d37bfea5244523e2434e5be4ea6c9f0186b291a2dc3a0910e4e457255f083546f1362af1c7349665ef1767eaa681dc4412b132a323f55d184e49ae4e0899d88c80b96a27dc8c327c16181bc1b9b99c491dd6aa46c89d50b8c4d9bf89a07994a73cd37103985f69a0ea306e2019e7b2de300694c387d907e9f785102b6832431bc37664079c82206a8dd6a9c21f3e10e7da6d3caca25f2c3aa291b98677c7a489bda6609a5e822bb62ab5b08b2a32f39f121a000e8556c264823a5780e8ac171b15c7f97bec209eb4a84059312e5061779cffdc37e7ff5b87af7c1971582880f781703f0c8efdbde50f95d3051ef95cc481829f5157b171a5bd7c1258cae44e750c87da3a3dca758672f60196daf7eb157af62eabd22768b5cdede405866e2d2dd90b177c52623a140c80311c1b649e4670b974ea521eb74146a1cedb2d3b951f71e01cec2ccc0d3c67aa89f0a64878eb2e5f4a5867e4023309317f228781bd95e6128dc0d712308a4f0c7558c4da4e5a98b3036931299a9b8aec8484c7be8f76ebd75734801685a9627987d830506962b15e0b27ed257e0eb5ed67e1045aa30c4d59bd588989fb90798231e2257a2050683d1911e075137e7dd53ea0be8b486d0014608f7e67b0bf397f19d7cf54f5b73776e106bdeb338fb3c6f7b9c31fac840e504b99a491c90ecf195ae1186b7ff97ae7e0435b509e78d6b55197e0eae16be3f888bd76c9038f92872c2ce05d9a992aa44d0d56034d3cabaa51c437a385b50b18f179a0589eec729da7aa11ebeff3df77724e16ccff26a46298321f8497552dd02b88cd5424cd3e842086ffe864cab9cab0aa05b4eafbc65eb5821c41714c672d056e9e8bc645826415698e2682434777b569fbe022146ea631d460fa214091c3a4ca9ec78f8ab3f1d72a05a302a2271d7a7a2ade2fd4f310c7907208ddea1c1c86e8b31fa19426d1ae219ba1a4c0e3f79f86f5d942bf69380cd25bb9225d23da40b2714a16fdaeecf65887706a797395d8e7688651a8454aab8109126fb92e9c7e7d89de56c1655d8916f7d30786f14afdedf9d1cc6b9f89a0d1a8bdf43d9fda813fc58606c92d87407bcad489f486e4060d13392d85cae90715d8f879af60241f3a2ef4b8f67d04dc8015991b22b4e850d878fbe04e688c0effd391e270641e83004cd4b20fbc7867b62b7b4919d7cd21833a3ff9e24951dceb6b4d5d70529304ed757a3a5df2c8f5907a0757ec4295d8d89607409433666a9bd7bc545c4e5ff407cc35f52f959fc34c39ff4192fa05adf6e95509d52b81cd05659ac27483440aa747371b967e7d016dd8ebf40c496674edccb653abc5a5f336a358368bd370b87798266391cbde91d1acaa14ba10264372db0be6a0ea3370bd1617e65551cbca58feee2fb421cd23dbd2737520", &(0x7f0000001400)="6ba307ec0bafcd3e8e719ae054dfaea38677f46246eed16cc54cc90d5c7ab9ec62b5d904849e6c27fe0713418a08e7738574c4f96705e3c1d669ceafb026412bdd2562836cbd74bda0a0c21d29720081f56a410aaf67c26d266a528b5c574561de51ea4c89c40e0f48a10de72c115f8a984c3dcf8b69767dbc4906e68814a0a15af1c2b7e508448d2c33ffbc6304330e793034f3b331da107b86c7af33d3c0ad0bd4cb5c99912dd1e2d1d1546e62258e7b4b0e22475a4c07ccedc9657b3e33ee0f5b3133", 0x200, r1}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={0x1, &(0x7f0000001540)="95e4b05d913c9e22788b459b13dd5defda30165bc34c7f35985fb9b3cb7efba3c77f6e263136bb6b5dacccd7b37194c4af6f728cb51fe0cfdc0cc66c3eb2b065cbe9d887de4da4bfb4bb7b23e9c9468bb573a7480f746fee7ac736adaa", &(0x7f00000015c0)=@buf="e35f8f2a37d984276558b37910058ada1d2b016e1117", 0x2}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001640)={r0, 0x0, 0x3ff, 0x3376}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x4) sendto$inet(r2, &(0x7f0000000280)="da8d8a54f7c5f4554c6de6a46f0252b5789b6b48053923c06696fb241d5b1b053a8bf3be06d0d443d35a720ed6885a1c98596389ad98b9a0db341a53d5b54dabc5511b2d7f533101686cd05f60596e3cd9be667fafe2c028b38d6784b3c1e8d64537ca54d0a61efd77845d59cc9d78441ead0443bf32552dca8c13b29385420b74009d28b1f37a7fdd25b4f09efefa4a", 0x90, 0x0, &(0x7f0000000340)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r7, &(0x7f0000001680), &(0x7f00000016c0)=@udp6=r9, 0x1}, 0x20) unshare(0x10020880) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x401, 0xe000}], 0x2) 02:20:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r2, 0x0, 0x7fffffff) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) (rerun: 32) sendfile(r3, r2, 0x0, 0x3fffffd) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) (async) openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x84}}, 0x800) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf2505000000080005000080000008000600b73d000060000180080009005000000008000800400000000a0006006c626c6372000000080009001c0000000c000700070000001a0000000800090011000000060004004e21000014000300fc000000000000000000000000000000060004004e21000056ab4eb5aa334133a0a016b883c55a1b6879a21e0c57da049362093538cf535313581acb7e836d28d0a7a3568c61986a74240deefe6523e40d86c210c4683e6e89318dada39d6a16242e61cd3625a87095e24485dee0ec8de706da4e75f89f11b881fdef5cdd379bf7356d2927093fe6a73875"], 0x84}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r8, 0x908, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 02:20:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) [ 1392.289576][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:20:35 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1400.456341][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1400.503535][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1400.581166][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1400.602193][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e0000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1400.677519][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1400.699863][ T7804] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:20:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1400.748257][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1400.768407][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1400.810977][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1400.835165][ T7808] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1422.872206][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.878571][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:21:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:21:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:21:05 executing program 2: unshare(0x6c060000) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x0, 0x0) unshare(0x80) (async) vmsplice(r2, 0x0, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, &(0x7f00000001c0)=0xbb2, 0xffffffffffffffff, &(0x7f0000000240)=0x10001, 0xfffffffffffffff7, 0x17) (async) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) (async) unshare(0x10080400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000000380)="098cf564027dc6b3b8a259f9681196410ca586fcc79f6bbebe3ce1ada5e86054d5", &(0x7f00000003c0)=""/14, &(0x7f0000000400)="77873530c04b429fac2382961ca3cc2d14a9f0cea55696dfdcd9cc1f97608639f799fc366656c1dafb6d6cbfba4181f65433941e41508b5b22ab12c9f948e0fc1a526b1036907e9126ffa1f61503ef443a98bd483af51defba2b25613ebf6753c2c9c087f0d079c7c8034330a1d6bc84512dce0484f9037e57af53eadaa4ef930d82b439c53e637295123d86638ab69a0eb7ae8f00c906c419e735375f1ea08955dcd9cb2bd66f9f3ac969f290404e0ae61656701aad1510135041dbdb44e814c55c7fd70e5136145f2d315fd1185aaab0cc0e03f2d02b528742c0cbb5cf11df8ad7fd1c2f83ea39b789b721370f886f1a3863b4f468b885093a84594bed9c02f935248927e5eb01bce6b95309056c5c57678ef5db103d65d739e5f296b9d5e40cd4a4091efe2e3a72d0ea88f0cc98a7db10aba961bf64fa56bd1408b3eb63cafc247c2c741cd6159c63740dedea07f885fcf4f42defa328247434ab0d114595b1a34a084581a21c757ef7adfdaca97c328aeb2da3432023f2ccc53d45c9304ca7d5530a9c4c4d9359e539a8e1a09845df7a6958a9c89018ea317e858c9cad7600a5b2d3ad5be50bfea5daf43d2ff2e35db04fe7a1b3308c38942df29f28faefe51b31aa45cffac1d6656c6f5b2e76ea7d322cdf3767bf73ee1e94b00eb3d9825e3e3392b6b4b90198be0d149b5bed0e570e3457e8cdfb2e58648efbe16965b53aa74b16487aaac3f909d7ac0b3e671bdf1fe9142825e035e8e62586f5f6244fc84ca269af3690a4344a63e6ca6923853857b89312bbe24f43fec64e8a6e934b5f7e69a5117356a607fb4310d053562288380629d15d7d2bebc5eb838e5fba7e80ba2cb540708f504ba60b504ed93f593fa172ef5edb617ff6429d8e0d84e6a0152ec05283651d1c915e8c807fc6c0857f3cf4945a28a86f3e6bae33f1c29db3984a8ba0e92759b6178c2894897ce1e70ebeededc8ca4a9f37240719b3a583b5ad1e3740b81a7bf98f7bc4cec95bad4b1cb41fb5a3494e5270294f46134bc1836d316bf21d9ada55862ba5f83bc44ee73a0ccd335cbd79d2e9cef56c333ce543eb30da602d586c36f7c1561e3b2f744bcc911765c35d8abe143be5b3f1f3532d775ff6f8665f3a3f631945f79e50a1d41cd7509539db8917e7f51618b5dc49ae5c3674e716fcf599d9fb20fd5e13dead84c3325e0dc9f85fe08b558efd6c554f57adc12d0fbc5e3911a418f488fabb12e50eb008c67dd566893199a10a24bd4b2ee3ab91ed8d16d350e0cb8e5ba62bc2b0c1d82211e75f73d9a5673f6be391bca9fb6868b1313e44d3b3799b1df8ba22af8d3eb98f8d4f7d2b4c3835a6cf11928b59c6336e6be6c01d2fd105c55c21b640984bdb83d83e6dc655b90a97faa8552170bebc02f0dca737aad231e7ac91a1fed68a15baaeb3c58604b13294e83b4e8dece07a8f41c97878c4c2329c252042f33b187b145ee4a5cb24b4f647351f5966fd3b5d35be1f602380aa41e167ded05fa43f2e5f25d2295ef8ca54aa78d3ff124f690649f3dd21d6f50ab274a2eaa0bd918d5db4122a4dfe67f60267c3c91854cfd97ad8b88df268b83860cd6588356f41c2e953eff2471f372b0eebac4a835e8877603e56220ab0ed17640b2ea9f5a3e677bd4ccfdc5ad2162f56fceff18b401a67ea95688d666f1cb63793c2051af5af253ac62e5c290abf3608fad7763adddb437e291edd9b24379d870ee5285033fd48250fcfeadc02bbbedf89acfd37e501ebce41a1f4d0cc52d539d1577f2791150519e4aa601b13e5ddc3f3845f2aeb8976743c1365cb51ae983aae75cf4a0d7adaa945d9e0019c7fdd76d820dbcd602b7bd0969057732190f37d51f5813b0d86b3dfa68310908a73c7be8ca3ea4b02cb975dc93a7a585403f00518f8600d0ce083c6c4c2c6c6efcb613dee59e6d6d197f1bab52148220e55863132db0f96aa6c359dd86376a22d4e6b295421920094663928498d2f5660642eca5e8c81665bae1db13cc86e0affc705cc4055dd062c17ce8db94169b655f3148e69da9c764e737975b48ec86ef2c4abb3a4e8125dc7b6dd35f725676ece22b3bf02b5ea5c498ee309fcff8467ccbed8a7abcc315734de8f36b225a33bbdce491985b56eadf8bd24fdb5a115ce753491411c62142823fa7eb64a23ef34cf8d81fabbaea70eb72a4206018c9191188ae33f09bf075ba3d3ae48142c9afe306e84a3d3f9d61c66ab07ffa9d4fd1dc8da9a8a77f94aa2abcb43b5d0832b483a5da5af6a1e44e9228de0510b7dff005d053585ee5447edfaed5b12078d3b3e8bb2fefe630e9bda11e91206189ac71347c34bcd6751357694e6ca6a5bf8c49a23d78f4d9032f2f1a5d494994d1bb78d4f2bb8d942318c94b6c4b566a519e944ff0979796f2bf69a97b974839fe48f681d4bf57c5133f3f14627ed512d418031262b2479192c1d819e89a03025ea6c86a6f9319e6b4d3949e4c1ef22601f093554e422e4d555c2d53dab9bdb068f807651ed2446087740afc85fa7b965430884eb2b6b2403227c09d8493445e5a74df9f305957bd232e885eafba96c25df28b6c8b511f22432103b59ebf8be18ff099cb9ee4d0e4fd031bb1d517a48a09ea4ca6f9e136be2f721dbb8b0e42760319f3e2e17209934c948307399011d65704951aff640e3fbbe9e5468d496a0ece88fd7be6829d61e3edcfc058cb9a896700de8a43a419dc3e88d43fc47c571ee6c884f0eeb951cf07b7df4bd3c315ed3c8730b914030d1d2a33e98743a8a7a296be0d910614667d35502c73189732aa5e8079ebea37c285860c99d5e7bc4c6b5a4e4ad7f9254789aab2cb2e7d7b1e9be5441ccebd4c3902becb394f701732bebce2909fc59b06339b35beeec0b39551d6f45d56a667b8d21a5ed8e2241d55b482eb2fa4896df0f0d167f43c0b67f2b6a4c161b1ca7c49831bc8f3214ce04a66baa46f574a15cbcbe5689441ae821aae3bc3ac76a0308d2c3be7e2979414f2feab56c1afe01df30cef71f45d636672f4b4f656ecbaf11dc47dbd8005bb69f02a9f70261db92354aa303194127171cabcd86e6bf45430cfcd0f55a42a80d8b637d948dd6c33ec5b8970d8b380e3ffc95f519b4c2acb49aff3a35659f819d8e3cdbd2c9d011c6c51f2519913985d04c920864a96b8c0e5fa9766f2f13b0448f8cc46cfc4e610a71e4798dd65d8429e620be793e07850edfe5aa8c9dd2867c70ff0575e290f8a4ad06c1b7816a59ad681844d412281276d3208e304df3a7618ed83aacd8632060e2cdc1149733b61093029dc85fd9256d10f83c2b971ecd61e7a415d6d3bc154d4630e56b0574f303f165c575df9ad997853212802bc6f0b6c4273a64338cb48f49114a046d478920fbb473f23957456a26e3534a00f88f0a7c4cd798495974602be40f3061c3fb0422c4e1d2aeca16ec85597cb33e722d20d535aad623a0ae93515ccd02b0789422562c01225efd74d6aaa8afb9e943e9f3675cc69457e2d9cd4dcec98366d83882baf4ad252478c651a9c1ddc36efa0d1c70397a973c68d4b5e57ee8526b35a06aed26fcd254a089a2a835cc06d0d3a4499bd48c46c94df21a2bd06128815a0eb8da43c7788173d0287580a90050f5a4e327928325ae238959dda67690f77f7c1a8c33c1414b97079d883a2e8ab2f5af7ad648a68176de6b7ae6aaa469de7ff57f4aa6f956a3bf91d9de711d99fffd76672edc33ee7edcf48afabfe56e6e18d2290be1977f399df2301d6ab737928f885e7c44e326ed82ee257934f9d38ec1af0e35e699edb4650139f85ca19e62759100aa8e6e27c7236b73a943af05f8595b4ecbb9f2e59d8ea3b766151a4b2c29bae35240e16e3c5cfe5407789fcffebf7a5123b2ac2c022391ebaa95aaa184c18ed88564ebaf86ff0afb9b4dc4f605961129c73dbf615782abe1b1b673429413432ccd6bba89a917df4e5b3f42573fdf13a1df90ee400876018d1a6606c6c803f89cf4b6169149923a96489b993b39d5c5f1762ff72d913a31e9025415a6a4a8c30ca650a0bd8faca1798101c804e8361e969a95c2e589fbed4b5f9137423b65fb667e501bdce79b633edf9f299e0359abdf7f73b146179152c7aa89ef3361157a6102458e70e259fdd5fdde7f4e6b489f1b611a0c42ff13f0fe1eb65f91f15b2296b34bbc6da9c9b34769dec7a7135678836670034ec2a0baf1a5bbc4dbcce80f1f76051d2571511decc9b0198892b64ab598c6331bc682c625385bc2a0c88ec9f69efa4bf5867683bdcfb9c60b6580c5b19d66369a7a9cec90551800036932b6e65f7214e3010615fd3d7fb824bb28359958cf8d18871eee89f70bf82b9b29d37bfea5244523e2434e5be4ea6c9f0186b291a2dc3a0910e4e457255f083546f1362af1c7349665ef1767eaa681dc4412b132a323f55d184e49ae4e0899d88c80b96a27dc8c327c16181bc1b9b99c491dd6aa46c89d50b8c4d9bf89a07994a73cd37103985f69a0ea306e2019e7b2de300694c387d907e9f785102b6832431bc37664079c82206a8dd6a9c21f3e10e7da6d3caca25f2c3aa291b98677c7a489bda6609a5e822bb62ab5b08b2a32f39f121a000e8556c264823a5780e8ac171b15c7f97bec209eb4a84059312e5061779cffdc37e7ff5b87af7c1971582880f781703f0c8efdbde50f95d3051ef95cc481829f5157b171a5bd7c1258cae44e750c87da3a3dca758672f60196daf7eb157af62eabd22768b5cdede405866e2d2dd90b177c52623a140c80311c1b649e4670b974ea521eb74146a1cedb2d3b951f71e01cec2ccc0d3c67aa89f0a64878eb2e5f4a5867e4023309317f228781bd95e6128dc0d712308a4f0c7558c4da4e5a98b3036931299a9b8aec8484c7be8f76ebd75734801685a9627987d830506962b15e0b27ed257e0eb5ed67e1045aa30c4d59bd588989fb90798231e2257a2050683d1911e075137e7dd53ea0be8b486d0014608f7e67b0bf397f19d7cf54f5b73776e106bdeb338fb3c6f7b9c31fac840e504b99a491c90ecf195ae1186b7ff97ae7e0435b509e78d6b55197e0eae16be3f888bd76c9038f92872c2ce05d9a992aa44d0d56034d3cabaa51c437a385b50b18f179a0589eec729da7aa11ebeff3df77724e16ccff26a46298321f8497552dd02b88cd5424cd3e842086ffe864cab9cab0aa05b4eafbc65eb5821c41714c672d056e9e8bc645826415698e2682434777b569fbe022146ea631d460fa214091c3a4ca9ec78f8ab3f1d72a05a302a2271d7a7a2ade2fd4f310c7907208ddea1c1c86e8b31fa19426d1ae219ba1a4c0e3f79f86f5d942bf69380cd25bb9225d23da40b2714a16fdaeecf65887706a797395d8e7688651a8454aab8109126fb92e9c7e7d89de56c1655d8916f7d30786f14afdedf9d1cc6b9f89a0d1a8bdf43d9fda813fc58606c92d87407bcad489f486e4060d13392d85cae90715d8f879af60241f3a2ef4b8f67d04dc8015991b22b4e850d878fbe04e688c0effd391e270641e83004cd4b20fbc7867b62b7b4919d7cd21833a3ff9e24951dceb6b4d5d70529304ed757a3a5df2c8f5907a0757ec4295d8d89607409433666a9bd7bc545c4e5ff407cc35f52f959fc34c39ff4192fa05adf6e95509d52b81cd05659ac27483440aa747371b967e7d016dd8ebf40c496674edccb653abc5a5f336a358368bd370b87798266391cbde91d1acaa14ba10264372db0be6a0ea3370bd1617e65551cbca58feee2fb421cd23dbd2737520", &(0x7f0000001400)="6ba307ec0bafcd3e8e719ae054dfaea38677f46246eed16cc54cc90d5c7ab9ec62b5d904849e6c27fe0713418a08e7738574c4f96705e3c1d669ceafb026412bdd2562836cbd74bda0a0c21d29720081f56a410aaf67c26d266a528b5c574561de51ea4c89c40e0f48a10de72c115f8a984c3dcf8b69767dbc4906e68814a0a15af1c2b7e508448d2c33ffbc6304330e793034f3b331da107b86c7af33d3c0ad0bd4cb5c99912dd1e2d1d1546e62258e7b4b0e22475a4c07ccedc9657b3e33ee0f5b3133", 0x200, r1}, 0x38) sendto$inet6(r4, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={0x1, &(0x7f0000001540)="95e4b05d913c9e22788b459b13dd5defda30165bc34c7f35985fb9b3cb7efba3c77f6e263136bb6b5dacccd7b37194c4af6f728cb51fe0cfdc0cc66c3eb2b065cbe9d887de4da4bfb4bb7b23e9c9468bb573a7480f746fee7ac736adaa", &(0x7f00000015c0)=@buf="e35f8f2a37d984276558b37910058ada1d2b016e1117", 0x2}, 0x20) (rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001640)={r0, 0x0, 0x3ff, 0x3376}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) (async) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x4) (async) sendto$inet(r2, &(0x7f0000000280)="da8d8a54f7c5f4554c6de6a46f0252b5789b6b48053923c06696fb241d5b1b053a8bf3be06d0d443d35a720ed6885a1c98596389ad98b9a0db341a53d5b54dabc5511b2d7f533101686cd05f60596e3cd9be667fafe2c028b38d6784b3c1e8d64537ca54d0a61efd77845d59cc9d78441ead0443bf32552dca8c13b29385420b74009d28b1f37a7fdd25b4f09efefa4a", 0x90, 0x0, &(0x7f0000000340)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r7, &(0x7f0000001680), &(0x7f00000016c0)=@udp6=r9, 0x1}, 0x20) unshare(0x10020880) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x401, 0xe000}], 0x2) 02:21:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:21:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r3, r2, 0x0, 0x7fffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) sendfile(r3, r2, 0x0, 0x3fffffd) pipe(&(0x7f0000000280)={0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x84}}, 0x800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf2505000000080005000080000008000600b73d000060000180080009005000000008000800400000000a0006006c626c6372000000080009001c0000000c000700070000001a0000000800090011000000060004004e21000014000300fc000000000000000000000000000000060004004e21000056ab4eb5aa334133a0a016b883c55a1b6879a21e0c57da049362093538cf535313581acb7e836d28d0a7a3568c61986a74240deefe6523e40d86c210c4683e6e89318dada39d6a16242e61cd3625a87095e24485dee0ec8de706da4e75f89f11b881fdef5cdd379bf7356d2927093fe6a73875"], 0x84}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r8, 0x908, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) (async) sendfile(r3, r2, 0x0, 0x7fffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r4) (async) sendfile(r3, r2, 0x0, 0x3fffffd) (async) pipe(&(0x7f0000000280)) (async) openat$cgroup_ro(r2, &(0x7f0000000500)='cgroup.controllers\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) (async) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r6, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x84}}, 0x800) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fcdbdf2505000000080005000080000008000600b73d000060000180080009005000000008000800400000000a0006006c626c6372000000080009001c0000000c000700070000001a0000000800090011000000060004004e21000014000300fc000000000000000000000000000000060004004e21000056ab4eb5aa334133a0a016b883c55a1b6879a21e0c57da049362093538cf535313581acb7e836d28d0a7a3568c61986a74240deefe6523e40d86c210c4683e6e89318dada39d6a16242e61cd3625a87095e24485dee0ec8de706da4e75f89f11b881fdef5cdd379bf7356d2927093fe6a73875"], 0x84}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r8, 0x908, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) [ 1430.685768][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1430.724265][ T7815] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:11 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1436.697911][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.720861][ T7821] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1436.767208][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.785888][ T7823] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00000000000002000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1436.834641][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.850842][ T7825] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.909651][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009e", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1436.960996][ T7828] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009e", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1437.009784][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1437.029441][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009e", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:21:33 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:21:33 executing program 2: unshare(0x6c060000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x0, 0x0) unshare(0x80) (async) vmsplice(r2, 0x0, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) splice(r1, &(0x7f00000001c0)=0xbb2, 0xffffffffffffffff, &(0x7f0000000240)=0x10001, 0xfffffffffffffff7, 0x17) close(r3) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) (async) unshare(0x10080400) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001500)={&(0x7f0000000380)="098cf564027dc6b3b8a259f9681196410ca586fcc79f6bbebe3ce1ada5e86054d5", &(0x7f00000003c0)=""/14, &(0x7f0000000400)="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", &(0x7f0000001400)="6ba307ec0bafcd3e8e719ae054dfaea38677f46246eed16cc54cc90d5c7ab9ec62b5d904849e6c27fe0713418a08e7738574c4f96705e3c1d669ceafb026412bdd2562836cbd74bda0a0c21d29720081f56a410aaf67c26d266a528b5c574561de51ea4c89c40e0f48a10de72c115f8a984c3dcf8b69767dbc4906e68814a0a15af1c2b7e508448d2c33ffbc6304330e793034f3b331da107b86c7af33d3c0ad0bd4cb5c99912dd1e2d1d1546e62258e7b4b0e22475a4c07ccedc9657b3e33ee0f5b3133", 0x200, r1}, 0x38) (async) sendto$inet6(r4, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001600)={0x1, &(0x7f0000001540)="95e4b05d913c9e22788b459b13dd5defda30165bc34c7f35985fb9b3cb7efba3c77f6e263136bb6b5dacccd7b37194c4af6f728cb51fe0cfdc0cc66c3eb2b065cbe9d887de4da4bfb4bb7b23e9c9468bb573a7480f746fee7ac736adaa", &(0x7f00000015c0)=@buf="e35f8f2a37d984276558b37910058ada1d2b016e1117", 0x2}, 0x20) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001640)={r0, 0x0, 0x3ff, 0x3376}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000040)=0x4) (async) sendto$inet(r2, &(0x7f0000000280)="da8d8a54f7c5f4554c6de6a46f0252b5789b6b48053923c06696fb241d5b1b053a8bf3be06d0d443d35a720ed6885a1c98596389ad98b9a0db341a53d5b54dabc5511b2d7f533101686cd05f60596e3cd9be667fafe2c028b38d6784b3c1e8d64537ca54d0a61efd77845d59cc9d78441ead0443bf32552dca8c13b29385420b74009d28b1f37a7fdd25b4f09efefa4a", 0x90, 0x0, &(0x7f0000000340)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r7, &(0x7f0000001680), &(0x7f00000016c0)=@udp6=r9, 0x1}, 0x20) (async) unshare(0x10020880) (async) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x401, 0xe000}], 0x2) 02:21:33 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x8}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x17}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd, '\x00', r7, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1000}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x4, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0x1, r8, r9, r2, r10]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kvm_test_age_hva\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r12, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x44}}, 0x0) 02:21:33 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1458.736472][ T7847] __nla_validate_parse: 2 callbacks suppressed [ 1458.736492][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1458.785499][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1458.835871][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1458.891854][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1458.945399][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1459.001210][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:21:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1459.057253][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1459.114270][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1484.312841][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.319222][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:22:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:22:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:22:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:22:09 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async, rerun: 64) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x8}, 0xc) (async, rerun: 64) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x17}, 0xc) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd, '\x00', r7, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1000}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x4, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0x1, r8, r9, r2, r10]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kvm_test_age_hva\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r12, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x44}}, 0x0) 02:22:09 executing program 2: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x3e8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000540)=""/187, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 02:22:09 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) [ 1495.078661][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:22:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040), 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1495.166258][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1495.233126][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1495.286358][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1495.333740][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) [ 1495.383070][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1495.431817][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 02:22:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:22:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:22:25 executing program 2: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x3e8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000540)=""/187, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 02:22:25 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x8}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x17}, 0xc) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xd, '\x00', r7, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1000}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x9, 0x4, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r2, 0x1, r8, r9, r2, r10]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kvm_test_age_hva\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r12, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x44}}, 0x0) 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) [ 1510.628111][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) [ 1510.695662][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) [ 1510.746917][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) [ 1510.794706][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777ef", 0x25, 0x800, 0x0, 0x0) [ 1510.848551][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777ef", 0x25, 0x800, 0x0, 0x0) [ 1510.915617][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1510.974930][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1529.296736][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 02:22:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:22:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:22:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast2, 0x0, 0x1, 'lblcr\x00'}, 0x2c) 02:22:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777ef", 0x25, 0x800, 0x0, 0x0) 02:22:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:22:56 executing program 2: ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x3e8) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff000) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000540)=""/187, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) [ 1541.793157][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7", 0x38, 0x800, 0x0, 0x0) [ 1542.001131][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7", 0x38, 0x800, 0x0, 0x0) 02:22:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7", 0x38, 0x800, 0x0, 0x0) [ 1542.136239][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd", 0x41, 0x800, 0x0, 0x0) [ 1542.238515][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1542.337639][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd", 0x41, 0x800, 0x0, 0x0) [ 1542.508297][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:22:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd", 0x41, 0x800, 0x0, 0x0) [ 1542.627190][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1545.752883][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.759261][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:23:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:23:30 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000001400)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 02:23:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 02:23:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 02:23:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) [ 1575.993490][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) [ 1576.065107][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe", 0x48, 0x800, 0x0, 0x0) [ 1576.126594][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe", 0x48, 0x800, 0x0, 0x0) [ 1576.187008][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3fe", 0x48, 0x800, 0x0, 0x0) [ 1576.237125][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x800, 0x0, 0x0) [ 1576.290078][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1576.348777][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1607.192598][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.199050][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:24:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10}, 0x10}}, 0x0) 02:24:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x800, 0x0, 0x0) 02:24:10 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 02:24:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:24:10 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:24:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x800, 0x0, 0x0) [ 1615.550945][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:24:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x0, 0x0, 0x0) [ 1615.635722][ T7994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:24:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x0, 0x0, 0x0) [ 1615.695842][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:24:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x0, 0x0, 0x0) [ 1615.744471][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1615.805283][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 02:24:10 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x8, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:24:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 02:24:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:24:46 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) write$cgroup_devices(r0, &(0x7f0000000140)={'a', ' *:* ', 'm\x00'}, 0x20000148) 02:24:46 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:24:46 executing program 2: socketpair(0xa, 0x3, 0x40, &(0x7f0000000200)) 02:24:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) 02:24:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:24:46 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 02:24:46 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/167, 0xa7) 02:24:47 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:24:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:24:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:24:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1668.632438][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.638776][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:25:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:25:21 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket(0x840000000002, 0xa, 0xff) sendto$inet(r0, &(0x7f0000000000)="d649018699f559d773ee626cf141c2048d754b41", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) unshare(0x180) 02:25:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:25:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (fail_nth: 1) 02:25:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:25:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:25:31 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:25:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:25:34 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:25:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:25:53 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x80) 02:25:56 executing program 5: unshare(0x40000400) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = socket(0x840000000002, 0xa, 0xff) sendto$inet(r0, &(0x7f0000000000)="d649018699f559d773ee626cf141c2048d754b41", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) unshare(0x180) 02:25:58 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:25:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@deltaction={0x2b4, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9f}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35f0}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x2b4}}, 0x20001011) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x7, 0xfffffffc, {{0x33, 0x4, 0x2, 0x8, 0xcc, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x24, 0xdb, 0x0, 0x1, [0x280, 0xff, 0x1000, 0x9, 0x3, 0xffffffff, 0x6, 0x8001]}, @generic={0x86, 0x11, "5eb07f5e5731c6ef53e9c51c9256bc"}, @lsrr={0x83, 0x7, 0x71, [@empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote, 0x8001}, {@multicast1, 0x5}, {@broadcast, 0x1f}, {@multicast2}, {@broadcast, 0x5}, {@broadcast, 0x6}]}, @generic={0x86, 0x6, "87da6bd2"}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0xa, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7fff}, {@multicast1, 0xed0b}, {@empty, 0x4}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@mpls_newroute={0xb4, 0x18, 0x800, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x94, 0x1, 0x0, 0x4, 0x0, 0xa, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x34, 0x6, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x101}, {0x1000}, {0x1}, {0x0, 0x0, 0x1}, {0x9}, {}, {0x8001}, {0x80, 0x0, 0x1}, {0x8c}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x8}, {0x5}, {0x1259, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x3}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x80}, {0x101, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1730.072628][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.079013][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:26:13 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:26:20 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:26:28 executing program 5: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket(0x840000000002, 0xa, 0xff) sendto$inet(r0, &(0x7f0000000000)="d649018699f559d773ee626cf141c2048d754b41", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) unshare(0x180) 02:26:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 1755.447429][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:26:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@deltaction={0x2b4, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9f}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35f0}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x2b4}}, 0x20001011) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x7, 0xfffffffc, {{0x33, 0x4, 0x2, 0x8, 0xcc, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x24, 0xdb, 0x0, 0x1, [0x280, 0xff, 0x1000, 0x9, 0x3, 0xffffffff, 0x6, 0x8001]}, @generic={0x86, 0x11, "5eb07f5e5731c6ef53e9c51c9256bc"}, @lsrr={0x83, 0x7, 0x71, [@empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote, 0x8001}, {@multicast1, 0x5}, {@broadcast, 0x1f}, {@multicast2}, {@broadcast, 0x5}, {@broadcast, 0x6}]}, @generic={0x86, 0x6, "87da6bd2"}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0xa, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7fff}, {@multicast1, 0xed0b}, {@empty, 0x4}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@mpls_newroute={0xb4, 0x18, 0x800, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x94, 0x1, 0x0, 0x4, 0x0, 0xa, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x34, 0x6, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x101}, {0x1000}, {0x1}, {0x0, 0x0, 0x1}, {0x9}, {}, {0x8001}, {0x80, 0x0, 0x1}, {0x8c}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x8}, {0x5}, {0x1259, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x3}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x80}, {0x101, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:26:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x80) 02:26:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@deltaction={0x2b4, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9f}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35f0}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x2b4}}, 0x20001011) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x7, 0xfffffffc, {{0x33, 0x4, 0x2, 0x8, 0xcc, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x24, 0xdb, 0x0, 0x1, [0x280, 0xff, 0x1000, 0x9, 0x3, 0xffffffff, 0x6, 0x8001]}, @generic={0x86, 0x11, "5eb07f5e5731c6ef53e9c51c9256bc"}, @lsrr={0x83, 0x7, 0x71, [@empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote, 0x8001}, {@multicast1, 0x5}, {@broadcast, 0x1f}, {@multicast2}, {@broadcast, 0x5}, {@broadcast, 0x6}]}, @generic={0x86, 0x6, "87da6bd2"}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0xa, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7fff}, {@multicast1, 0xed0b}, {@empty, 0x4}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@mpls_newroute={0xb4, 0x18, 0x800, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x94, 0x1, 0x0, 0x4, 0x0, 0xa, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x34, 0x6, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x101}, {0x1000}, {0x1}, {0x0, 0x0, 0x1}, {0x9}, {}, {0x8001}, {0x80, 0x0, 0x1}, {0x8c}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x8}, {0x5}, {0x1259, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x3}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x80}, {0x101, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@deltaction={0x2b4, 0x31, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9f}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35f0}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x2b4}}, 0x20001011) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x7, 0xfffffffc, {{0x33, 0x4, 0x2, 0x8, 0xcc, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x24, 0xdb, 0x0, 0x1, [0x280, 0xff, 0x1000, 0x9, 0x3, 0xffffffff, 0x6, 0x8001]}, @generic={0x86, 0x11, "5eb07f5e5731c6ef53e9c51c9256bc"}, @lsrr={0x83, 0x7, 0x71, [@empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote, 0x8001}, {@multicast1, 0x5}, {@broadcast, 0x1f}, {@multicast2}, {@broadcast, 0x5}, {@broadcast, 0x6}]}, @generic={0x86, 0x6, "87da6bd2"}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0xa, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7fff}, {@multicast1, 0xed0b}, {@empty, 0x4}]}]}}}}}) (async) sendmsg$nl_route(r5, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@mpls_newroute={0xb4, 0x18, 0x800, 0x70bd28, 0x25dfdbfb, {0x1c, 0x0, 0x94, 0x1, 0x0, 0x4, 0x0, 0xa, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x34, 0x6, r6}}, @RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x101}, {0x1000}, {0x1}, {0x0, 0x0, 0x1}, {0x9}, {}, {0x8001}, {0x80, 0x0, 0x1}, {0x8c}, {0x2, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x8}, {0x5}, {0x1259, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x3}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x80}, {0x101, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) 02:26:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x80) 02:26:51 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:26:54 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:26:54 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r3, &(0x7f0000000300), 0x12) 02:26:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto$inet6(r3, &(0x7f0000000400)="7e724b62d2ce841e83f221b24d2d344235bbfa6877c0bbb1473d568645a13e1ad367f1304eba257a2bbf1e24da216cd89efa8f95f33968ea505fe5a88ff0e43218ea8fbb53143425eaea932fa88e1abdd1fef3a35cf47e3204573f5d58dfa1e957b12a23e14ce49d9c8876d62ce59fb0d34f7c35a36ce7924f61bb0b1c02ceb683da1cccc787baacff6e4fe8c932396c20f93f8c6b3bcc3134c896d27e2f18d891cbaf2285fb3780a56ed439aad7c2bda743a025bd41f5787457da05d69b20ccf05b861a35d3662e159da36f233b8c6509b88f186f1cbfd62860e4cbcac571c9b276c03970fac67b3279f84d683504062407faa7401cd136475225e0b13eb5dc42186cd944d3ee42d5eb668d910ed337a5dce59ff5764a561c99b8564986e818ecb168a0bb5d9cc1a99af38cbe70c883c685207f2c4b6daeb73ff92295ee6d584ac011637c11e48daae8782c48484eb95dd6652c9e14e0274f06ebb196d5ffdba1f4a08d28120ecf444909923c94fb9b259b7cb0918eaa4affb1090d12e8b2f0aa8ab11e3edc3de820c62abc9c65569bb3e872240fac01c5f9d808bd2849ff470b33e606ab787fac25ed2fffbeaf5f6a57f2ef19298cb5f3d9e0d81515503a1db427ee00d9bac45e420f3b0e09c80cc21a7d61776cde9cb527f75aa4baa906ab9ffe12bf904bee9dedb218757d3f3c9b2e553aa9bb1c0a026ce349643d5b56a5e6364de55cdef7b1f0b69263de18507cb445765e96aeb4d4ce332e2bce26bdafc2afda99d32f6b6d1edfa24774ed92acf0b65789a75299fd03ae7fa4e39fe21bbb3b52b863c090d6854a965c01bb3c92e0066765edd3e1d403e43fd1a1d7c1cd2ca93837fb2233641971b938deca1834979b5c174de3c3550c9bcf4f347baece0316cccb6bb708d5091dd6e42f7fc150eb391fa458a7c78d47056eb9ad80976e8543a4c53943d1ebb08c08b04b4206d046ffd642fb29aa8403644a87df6098b71c8216d1650e2a527c4fb605fab5000d6c315c916dc04d13bffe1a5811d77f8f9d364a28fe268a9c2476df23d7f31626a5df8a7efa5d7c2265838597a59618cd66dd78bfa5f29caf70411cf43c0018fee8875b0a2752576c09cabb68fefee441d73a5fac31fddcca7172a252675a8bc66751c849b6920693cd02ab6c0de6b74522b1efc8836ecdcc76fbfbe8dae7a50623b6e393d534f6d728aa2b479bb7987eab4ce0ab39db15b7c06a72d1df750e67aa11482ead45794ffed2c702bec7e304e5ff3c1775eaa56df000278ebffcfe74532495f817d866bf14023f6bd29dd70b10fd9d9cb63c347276c031b701fc3af544ea7042d91a6a21f29b3e9e864b1ea8c4e68cff5409f9efcd0cf7871bdbfcbe539933a85f10582903855dc9eeada6ab971d4f9b6eaba86ddae9bbb7bd677332780f5b59d5ffec83742c34086dd63b215a8be535f67a09a11094834447050170c056f7a24c5ae6758f49573244761dcd25d78734c5ebb0997b44d9c5310bc1febe38b1cc8aceb204c1cb165dfc6d062ac57a105894a430f346e67829ac4981e59a5c5aabe48d703ab0c0603943318d8c3d709c3f72cce6e78eba0e095fec334cc321ab7659edafe4eaef9541f79d24d11684aa1c5d19b2972fa0193cf05173d4bb3c88e4690fe7a91b70a50b2da117bab0a6dcf9b8a7aeeb09ab5f41270e30b81278638a6f98103757b691d38ec3ca669f7d226b650c7e8492abd31c699f7fb64421fedae3185f058a9d5c2b02caaaffd41f649e5f67e66146da6a8d48affd92e5b7c2a8423539f07249a3683855d6f9761cd5949ca7eb9c107ddc804b74a7812130cee15fa1ff0c065a1c63a4e0bc1df2d7275db076ad62c5464e52e845838afe8168f5f513ff7098969ceb9cb09b5f340961aff3146ad67ba0efee511293ab0950f90bb611c79577cb7e1ec0c417e7c3131c009e803de17bcdb49c395b2f7513997ac392c938efb24a230c07442d0b8723cddd7436b721568d41fd9c83638b23dece60ae63ad809ada0d2722a7969685ab050c5237db5ea5175880f2d3a83a71943ab22daf7fd79635f2faf8c08ddb05f2249c66854fd0a2ca8771489d2a7477e7abd0b1de5c7c565aae92e34ca364b5803974c588864f06b22b1b27013efe2369177b76c527fa6486463c2b20bb0e8f825379e476a7afb0a400a465724b1ae4e65eafae07c8dd384e1b63cb6a1c6c68ae3023eb5890cc19fde1383ea19e0fb6257f866d089fb1e8230f3dff8ef11ba84e1cd6a19e80d95a534d5a5210e3136e8f6237afe098df02afa95cc58c34ed37ef86f086c0b3d72afb0fc523c235d83dbab5695b84f6cc2ad3fff9125728544c9bce40ae4362b4338c0f5418c942ec4438ef58ac263a79ed6dea3d6aa2ae290634376205de57f3661204b970a48d31f2e056e99ac3728b1e05509bb17f5fe6aa0dd4ac7f14970d92a43e52e62b0d51fdb0697e8a156939c0370b7e0e6c6e40f9220408e964768b1d70969ee457215fa13e64a283ac32a1c0acbd59bd3fbbefa40062d02325b131a5c3c76d4b5bd8cd87f20dc311f4aefe6541778f682fd9ea980651c4bc2d8b5b890b6b84024b20608d6688133b4a5e1a6a7628e402e8a0722f1bc3dfee536ae68b52b057edfc20d7d26af65f0bda8ef322fdbc85b0290959304324ffde9a7da95cdf30f4d16d0d551e05d1e59185cdb932475eb4a5e0e027b0651765e008e6bb127925e73f96e126d6b591c353adb3fb4bd077ac05b32877f5a5e8e36c16fcb619dd5b3b50fe4eb8790040ed74cd74cfbee430c57e888c50440fe0f469d7a4ed58d3a28af7e0f5737f25d06675b8034958b5b1469714379474cb8eddb54237bfc70135a70272f8911fc783b26c97e410662a97b9467beda60aa64bb7da5e0bd7b9182caf2c667a2d84dfb39080a2fd476698bec02ed937ddbfab8f734861c550c8ecb3bf2c93a451d243d703a218a9e2b5389e4ed1a6afd6e1c6da4e9bc19a64cd969150e541e6c4dc46973aa4164ece6dd18edc78a80ab05926e4dad5b3893e9723a222f8fb43ed3f8ff2d206a778b5f77842fc5eedd975034e28bc3d2252e7b7147f9d5543ef974c2fec856e80b9cedf22b7247631b28975f28b3262d4870d4f992bcabde8c7970657dd98c305f6ff65c33921c784ec85a8fff0c6ae27a59fcacea95487b360ca0bf9783b7960a3cfc058ccb4e11f35420e4e667fa9d86c37d6680aca0fd9007bcd64233a03f0bb242db13f9f4ab09bfec6562a8891c48a4a236be4085ed3ace0866190e67a4ce929dd0ab3de2f8c4d253a588c32a417b08feca5eba5ec3b2a348e292a1989b29b8588d46bc22b9ad49d73d64cc16718a3c6534cd782a6f205511546695efbce635a118aef4f8fa1318bc53e17ba605647f492343fd937507691a367eaf5cf84b2ef800eb20b51d1e6dcf49153afff920202c162fd45477e4e67dc8c6164069b3dbc5ddff98286f6b51fb20f0edad8d86645209079a421970885f46b52970cf0c7a90b0c1fdbf3c642f8da2a57bb3340ae53df96b70b8ed5d90b8b79e4824c7be0d7e629824f3467db102f235f58435f1bb648e53f0c4bc3460bf7a012ba2d5dd4b8084d14107e3850f521b647905100a6d40188ed8f9d986815fe06449e550593492e54306390ea24f0ef6656f9bd1f3a42fc7f94abbe25ffcc4a0bbe01eaa86108459eeb82b923d09fff1c06df5cc0716287bd7b6d35232cf364f689b8584b290af0ea051dfd939910f860fd44bc06a51c723d3a1cb509cfb56b79cf975d5d9dae8c50f56db36e2d363d32da325795d47adb34cede9ef623b81fcb94f5c7a975b73a5fb1ceebf754302eb7dafd26a1000a52ee30dfc36cbb91664949b3f127a7d316af6cf24d2c4762abd946274b952f5eccad2e17d737b48187cdfd5e62acf5a6cb219215f8674bdd59b43522a49e6297ec66c6d89224fe27401ba8cdd9fd2efbd8000ab63dfd4cbcfe83d2748eb46b23513317d1f845cf574dfe4e0b9547000c973baab514891e1014efccf2c5fba55d18d8a8b717f1b530ea68a2cf5961eefb9ac93475caf4680e1bb18b68da57df37704f68fb5cb99e9d0423570acf17e49e13c65cc61ed022f34a8f7f1a7de2954d75d5f364f1aa73207188467891a62f8226261b6aa8022e0a0df7ab74ae0dec8a5378f5e1a9dda3bc5f674c63e4f21b5c4e47f6f9797293968f6b8cfb0e6b6fc80311e257c1f1496a769815d5cc89fb1295423ec080f4f881d07d04aa09391b39085689a442c3beebc995ce15abfd85af6d7eb880e9bd13a813da7cfdf065aeb708c866da9447cf2869bb183cbee25abf77e5e84cce4843b1374ff681a53f424f8b52a42b4d45824127501bde65555e762f700f0a983b3daa82a5b9824b449adfa24f46388aed94aa89f971186da5d38b869a27dd1ff202e45349c1e62f751837e1dad67f3811ff60ae2d6cb8c5af0fe7848560e633acafbf534bb3a80b76ece6270156fa5e87e521f98e2dd420102cc4a1a538844e169a6287c7820497cbe92c02bbd1da8fa8cf7915ccf9961c101632293ffaaf04797da3d86647a8235654a31acab52b1da666f88d1824e547387560b3092fdfea5b0141ca73ddd2db71a66e4fcf5ef3c950a963faa0156107a7e7a78afdc33c1370fafb1ea3c826ab807760e33b5d57760c763274a8d044a6661de816ba9752d1e977fddf44b93fddbfedadaea8c4abb98adaaafb8102e7a84d1359fef844f25795a72e1a6d78667494b42a245d88e6414cbdc5777f031c2e41ea650135653fa0d6cbee5ebf1c16b7cf3dbff14d73ba021e194300fc179ae35e71f037eb90137d85cdfee381a1fa6c31d2601a9c57582c0204fdbda25749ef0c828421d1b66a847d97fa11c680f2d0c56e449d4a5d4f75034685cb2997dc6685c683f536319ccff7b7ea2ba034d4edfc478782913a5769a31681c62f7017c008f5676a7790d3fc4099b0870c32a1c7dc85eb35a66d20895e7b72ca11eb6e790bf4cd946b3907f6f85ab75ba614c36ff4313b2080df6c19b62c59636b07ad18c7ddc6a8da35d6c90aa3069e01a4dfaf162e20faf81258431a53ed96f51985c8d8d182efec6845a0b10baa27ff2b0b20c3861caf889c86b6158071c4e9832463f94321a9dddd71a455f5d0a0f47df482dcf8f32e680ff9866ffe34aa77fbdaf9118fb5a4da99420245d05092f77dbcda26adfc43db17de5900c7f54eff600650caa701d029a6f0936aac86a27724a38d8aeb25d368094158192821f483dfee98a351f5dfc5277d4178e89acf8c0fc6527ebca75ecbb569aece5766189759fa83fce3cb0de2786d0419636acd7ad87c8dacef1c69c071ef5ae262933eb5e153b2f4a127916e2abc3624c1023a4d1582396237f6886646c9b0c6726f83543c31d385265b7a1b2fe3e6975a05c0aa142b036c6af7915d05537d2f02301ec2e6eb182576e22a29d8fdb4445c1e6173c8f5f76f4621514de032954a15064b3c6132b2086b111a73c4aff7b0119e148d0f2fa4db5a275d0734547e1b8769787139235a9fc50fadc5bae0e3fd6ddd7864b6d89ae6bf3d5d698552ccdcefcbd194de2509ee80acf487ce6e73012fe263c765d59a05f5cc5f5810e83d512f2405a69452e477efed5b38a7a917230886e1109996bed6624242527f299c5bbbe996e627f325c36ff393eedf33ef7ccc3be7b992c62b555dfe68653aa4700816210d24c3c788103010ee1f2af56cf2dd7359bfa7b11820383f71efbea0c07daa8c2cd12a7b0800e62d2db90215c167b09e", 0x1000, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1791.513495][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.519878][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:27:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:27:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:27:28 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto$inet6(r3, &(0x7f0000000400)="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", 0x1000, 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:27:39 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:27:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:51 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:27:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:59 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:27:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 1852.952871][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.959327][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:28:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendto$inet6(r3, &(0x7f0000000400)="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", 0x1000, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:28:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:28:27 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:30 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:28:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:43 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:44 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES8=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000400)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x800, 0x0, 0x0) 02:28:49 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:28:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES8=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000400)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x800, 0x0, 0x0) 02:29:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES8=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000400)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x800, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES8=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000400)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x4a, 0x800, 0x0, 0x0) (async) 02:29:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:05 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 1911.031366][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 02:29:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508010e112dfc000100746266003400020008000600a423"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 1914.392185][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.398550][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:29:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:29:33 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508010e112dfc000100746266003400020008000600a423"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) pipe(&(0x7f0000000100)) (async) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508010e112dfc000100746266003400020008000600a423"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) 02:29:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:29:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:30:06 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:30:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 1975.832919][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.839266][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:30:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508010e112dfc000100746266003400020008000600a423"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:30:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:30:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1986.621935][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.712839][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.839184][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.937541][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.909046][ T11] device hsr_slave_0 left promiscuous mode [ 1987.925117][ T11] device hsr_slave_1 left promiscuous mode [ 1987.932577][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1987.940063][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1987.949192][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1987.957340][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1987.966073][ T11] device bridge_slave_1 left promiscuous mode [ 1987.972808][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.983175][ T11] device bridge_slave_0 left promiscuous mode [ 1987.989402][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.002912][ T11] device veth1_macvtap left promiscuous mode [ 1988.009928][ T11] device veth0_macvtap left promiscuous mode [ 1988.016256][ T11] device veth1_vlan left promiscuous mode [ 1988.022174][ T11] device veth0_vlan left promiscuous mode [ 1988.357625][ T8225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1988.368152][ T8225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1988.377026][ T8225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1988.389227][ T8225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1988.397320][ T8225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1988.405221][ T8225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1988.447763][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1988.460136][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1988.474028][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.492498][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1988.567442][ T11] bond0 (unregistering): Released all slaves [ 1988.849888][ T8222] chnl_net:caif_netlink_parms(): no params data found [ 1988.941104][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1988.948377][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1988.963776][ T8222] device bridge_slave_0 entered promiscuous mode [ 1988.974406][ T8222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.981630][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.990000][ T8222] device bridge_slave_1 entered promiscuous mode [ 1989.027723][ T8222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1989.063415][ T8222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1989.119329][ T8222] team0: Port device team_slave_0 added [ 1989.142934][ T8222] team0: Port device team_slave_1 added [ 1989.196278][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1989.210427][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.278623][ T8222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1989.304878][ T8222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1989.325067][ T8222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.351572][ T8222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1989.426286][ T8222] device hsr_slave_0 entered promiscuous mode [ 1989.441499][ T8222] device hsr_slave_1 entered promiscuous mode [ 1989.460426][ T8222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1989.468081][ T8222] Cannot create hsr debugfs directory [ 1990.333140][ T8222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1990.347155][ T8222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1990.376765][ T8222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1990.402487][ T8222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1990.472570][ T5125] Bluetooth: hci3: command 0x0409 tx timeout [ 1990.617754][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1990.667730][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1990.679532][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1990.721773][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1990.742697][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1990.752281][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1990.796372][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.803598][ T8196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.863896][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1990.880678][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1990.889652][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1990.908348][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.915568][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1990.930902][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1990.948868][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1990.981716][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1990.999390][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1991.008346][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1991.026446][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1991.039120][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1991.057747][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1991.068114][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1991.085149][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1991.104776][ T8222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1991.129423][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1991.499761][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1991.508160][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1991.531885][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1991.931411][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1991.948662][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1991.982665][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1992.001864][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1992.011234][ T8222] device veth0_vlan entered promiscuous mode [ 1992.023048][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1992.031674][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1992.043172][ T8222] device veth1_vlan entered promiscuous mode [ 1992.073849][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1992.084207][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1992.093867][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1992.103129][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1992.114641][ T8222] device veth0_macvtap entered promiscuous mode [ 1992.127888][ T8222] device veth1_macvtap entered promiscuous mode [ 1992.148613][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.161361][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.171783][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.184073][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.203448][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.224424][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.240059][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.263126][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.277311][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1992.296780][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.309210][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.330841][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1992.339176][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1992.349012][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1992.358387][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1992.370190][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.385492][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.396421][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.407591][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.418520][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.431796][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.442113][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.452953][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.463162][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1992.474952][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1992.488244][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1992.508621][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1992.527039][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1992.548954][ T8222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.560626][ T5125] Bluetooth: hci3: command 0x041b tx timeout [ 1992.567964][ T8222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.577969][ T8222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.595851][ T8222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.673795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.705458][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.719894][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.740780][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1992.747653][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.758311][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:30:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 1994.630622][ T5125] Bluetooth: hci3: command 0x040f tx timeout [ 1996.721063][ T5125] Bluetooth: hci3: command 0x0419 tx timeout 02:30:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:30:34 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:30:36 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:30:50 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:30:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2012afb330b508680a0000020000010100000000be62658cfb47e42b71938dd9062d3e52ece154906077fdba6960bee54c044d80e5588e9d4ac8270dc4f756020abd8a61ef56f8c6846a7dc221851f29910d431e009e6d0d095e2c369f205314dd60554835be1770cf69db8e7708e4e70373", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:30:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2012afb330b508680a0000020000010100000000be62658cfb47e42b71938dd9062d3e52ece154906077fdba6960bee54c044d80e5588e9d4ac8270dc4f756020abd8a61ef56f8c6846a7dc221851f29910d431e009e6d0d095e2c369f205314dd60554835be1770cf69db8e7708e4e70373", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2012afb330b508680a0000020000010100000000be62658cfb47e42b71938dd9062d3e52ece154906077fdba6960bee54c044d80e5588e9d4ac8270dc4f756020abd8a61ef56f8c6846a7dc221851f29910d431e009e6d0d095e2c369f205314dd60554835be1770cf69db8e7708e4e70373", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) [ 2021.757884][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:30:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 2023.847858][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:30:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:31:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2012afb330b508680a0000020000010100000000be62658cfb47e42b71938dd9062d3e52ece154906077fdba6960bee54c044d80e5588e9d4ac8270dc4f756020abd8a61ef56f8c6846a7dc221851f29910d431e009e6d0d095e2c369f205314dd60554835be1770cf69db8e7708e4e70373", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:31:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 2037.281811][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.288169][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:31:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff0500ffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r7, 0x25, 0x13}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000440)={0x67446698, 0x0, 0x2, 0x3, 0x1, "093eba1384aa4a8855699e6e43d4b349369e3138bcef35aa077aa6595ce46ed2449953d7abea1073c67356752f9ef725fe19b41cca6edf40e50d7a7b9c734f6b"}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r10, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r10}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:31:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:31:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:31:26 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:31:36 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:31:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:31:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:31:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff0500ffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r7, 0x25, 0x13}, 0x10) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async, rerun: 32) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) write$nbd(0xffffffffffffffff, &(0x7f0000000440)={0x67446698, 0x0, 0x2, 0x3, 0x1, "093eba1384aa4a8855699e6e43d4b349369e3138bcef35aa077aa6595ce46ed2449953d7abea1073c67356752f9ef725fe19b41cca6edf40e50d7a7b9c734f6b"}, 0x50) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r10, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r10}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:32:00 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:32:01 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:32:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 2098.712642][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.719036][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:32:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff0500ffff00090000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r7, 0x25, 0x13}, 0x10) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000440)={0x67446698, 0x0, 0x2, 0x3, 0x1, "093eba1384aa4a8855699e6e43d4b349369e3138bcef35aa077aa6595ce46ed2449953d7abea1073c67356752f9ef725fe19b41cca6edf40e50d7a7b9c734f6b"}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r10, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r10}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:32:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 2111.030631][ T5125] Bluetooth: hci3: command 0x0406 tx timeout 02:32:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) [ 2116.987932][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.098148][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.220792][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.321216][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.227509][ T9] device hsr_slave_0 left promiscuous mode [ 2118.237262][ T9] device hsr_slave_1 left promiscuous mode [ 2118.244822][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2118.255994][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2118.269129][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2118.276956][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2118.286203][ T9] device bridge_slave_1 left promiscuous mode [ 2118.293094][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.302610][ T9] device bridge_slave_0 left promiscuous mode [ 2118.308826][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.320728][ T9] device veth1_macvtap left promiscuous mode [ 2118.326785][ T9] device veth0_macvtap left promiscuous mode [ 2118.334861][ T9] device veth1_vlan left promiscuous mode [ 2118.340820][ T9] device veth0_vlan left promiscuous mode [ 2118.626761][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2118.637053][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2118.647868][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2118.656167][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2118.664187][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2118.676957][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2118.677413][ T9] team0 (unregistering): Port device team_slave_1 removed [ 2118.717178][ T9] team0 (unregistering): Port device team_slave_0 removed [ 2118.728818][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2118.745103][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2118.808676][ T9] bond0 (unregistering): Released all slaves [ 2119.107569][ T8439] chnl_net:caif_netlink_parms(): no params data found [ 2119.224637][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2119.231966][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.240313][ T8439] device bridge_slave_0 entered promiscuous mode [ 2119.250799][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2119.258561][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.267321][ T8439] device bridge_slave_1 entered promiscuous mode [ 2119.305914][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2119.318248][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2119.354980][ T8439] team0: Port device team_slave_0 added [ 2119.381620][ T8439] team0: Port device team_slave_1 added [ 2119.425164][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2119.437730][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.475755][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2119.491753][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2119.498739][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2119.533473][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2119.614198][ T8439] device hsr_slave_0 entered promiscuous mode [ 2119.628342][ T8439] device hsr_slave_1 entered promiscuous mode [ 2120.659257][ T8439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2120.675046][ T8439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2120.701686][ T8439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2120.728454][ T5126] Bluetooth: hci0: command 0x0409 tx timeout [ 2120.739341][ T8439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2120.926464][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.943278][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2120.952056][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2120.964108][ T8439] 8021q: adding VLAN 0 to HW filter on device team0 [ 2120.978315][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2120.988545][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2121.006076][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.013317][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.048712][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2121.057225][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2121.078182][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2121.087788][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.095040][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.115115][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2121.129891][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2121.212306][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2121.222804][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2121.241622][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2121.261048][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2121.269855][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2121.292606][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2121.302258][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2121.322868][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2121.334110][ T8439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2121.351638][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2121.666611][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2121.679361][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2121.693641][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.728518][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2121.747081][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2121.778645][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2121.788240][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2121.807963][ T8439] device veth0_vlan entered promiscuous mode [ 2121.829925][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2121.848671][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2121.870394][ T8439] device veth1_vlan entered promiscuous mode [ 2121.898744][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2121.907928][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2121.926763][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2121.952625][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2121.964652][ T8439] device veth0_macvtap entered promiscuous mode [ 2121.976938][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2121.988470][ T8439] device veth1_macvtap entered promiscuous mode [ 2122.023195][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.035070][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.055566][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.075080][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.085504][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.096288][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.106281][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.117328][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.127601][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.138545][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.151849][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2122.162654][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2122.171969][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2122.184328][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.198686][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.209809][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.221020][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.239287][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.251016][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.261406][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.272559][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.282879][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2122.293724][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.308018][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2122.327962][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2122.340163][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2122.360278][ T8439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.370094][ T8439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.381516][ T8439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.391352][ T8439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2122.511704][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.519847][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.556292][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2122.573525][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2122.582387][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2122.595123][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2122.790805][ T5126] Bluetooth: hci0: command 0x041b tx timeout 02:32:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:32:38 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 2124.880654][ T5126] Bluetooth: hci0: command 0x040f tx timeout [ 2126.950599][ T5126] Bluetooth: hci0: command 0x0419 tx timeout 02:32:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:32:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:32:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:32:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:33:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) bind$packet(r1, &(0x7f0000000400)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f16372fec0b04a57102ca2be00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r9, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2151.800094][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.892125][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.988853][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.105679][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.182448][ T11] device hsr_slave_0 left promiscuous mode [ 2153.188988][ T11] device hsr_slave_1 left promiscuous mode [ 2153.196500][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2153.204973][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2153.214981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2153.223438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2153.233362][ T11] device bridge_slave_1 left promiscuous mode [ 2153.239656][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.261691][ T11] device bridge_slave_0 left promiscuous mode [ 2153.268286][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.296864][ T11] device veth1_macvtap left promiscuous mode [ 2153.303469][ T11] device veth0_macvtap left promiscuous mode [ 2153.309607][ T11] device veth1_vlan left promiscuous mode [ 2153.316568][ T11] device veth0_vlan left promiscuous mode [ 2153.586128][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2153.609441][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2153.618564][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2153.631243][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2153.642050][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2153.649384][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2154.629552][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2154.647616][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2154.659283][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2154.675917][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.745357][ T11] bond0 (unregistering): Released all slaves [ 2154.974005][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 2155.063417][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.072865][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.084239][ T8610] device bridge_slave_0 entered promiscuous mode [ 2155.104968][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.130845][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.148753][ T8610] device bridge_slave_1 entered promiscuous mode [ 2155.188888][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.201876][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.245492][ T8610] team0: Port device team_slave_0 added [ 2155.259386][ T8610] team0: Port device team_slave_1 added [ 2155.339775][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.349738][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.387845][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.409717][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.418974][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.455167][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2155.545785][ T8610] device hsr_slave_0 entered promiscuous mode [ 2155.561499][ T8610] device hsr_slave_1 entered promiscuous mode [ 2155.580447][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2155.588071][ T8610] Cannot create hsr debugfs directory [ 2155.752376][ T5125] Bluetooth: hci5: command 0x0409 tx timeout [ 2156.484790][ T8610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2156.503994][ T8610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2156.536976][ T8610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2156.583113][ T8610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2156.752243][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2156.767632][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2156.785326][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2156.803442][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 2156.840794][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2156.849693][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2156.868298][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 2156.875528][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2156.906474][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2156.917711][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2156.932953][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2156.949113][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 2156.956318][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.973902][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2157.017151][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2157.037664][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2157.051371][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2157.060199][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2157.069753][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2157.078981][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2157.089405][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2157.110219][ T8610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2157.137536][ T8610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2157.154803][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2157.169252][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2157.181126][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2157.552483][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.560574][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2157.568232][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2157.615179][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2157.632879][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2157.671971][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2157.681054][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2157.692437][ T8610] device veth0_vlan entered promiscuous mode [ 2157.715646][ T8610] device veth1_vlan entered promiscuous mode [ 2157.741099][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2157.749194][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2157.775337][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2157.809188][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2157.818371][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2157.827858][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2157.836436][ T5125] Bluetooth: hci5: command 0x041b tx timeout [ 2157.846996][ T8610] device veth0_macvtap entered promiscuous mode [ 2157.860487][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2157.881617][ T8610] device veth1_macvtap entered promiscuous mode [ 2157.933231][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2157.943919][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.963186][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2157.979172][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2157.998821][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.009831][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.023082][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.034116][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.044317][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.055235][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.068109][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.092970][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2158.111150][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2158.140763][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.161556][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.172395][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.183233][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.193459][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.204355][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.214622][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.225182][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.235160][ T8610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.250499][ T8610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.262046][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2158.271820][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2158.280678][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2158.298506][ T8610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.311428][ T8610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.320194][ T8610] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.329997][ T8610] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.448883][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.472296][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.494494][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2158.524669][ T5404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.538085][ T5404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.548432][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:33:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async) bind$packet(r1, &(0x7f0000000400)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f16372fec0b04a57102ca2be00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r9, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9}, 0x14) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (rerun: 64) [ 2158.627497][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2158.647410][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async, rerun: 64) bind$packet(r1, &(0x7f0000000400)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f16372fec0b04a57102ca2be00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r9, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r9}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2158.726740][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2158.867473][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2158.878656][ T8705] sch_tbf: peakrate 15688 is lower than or equals to rate 1745169492 ! [ 2159.920611][ T5125] Bluetooth: hci5: command 0x040f tx timeout [ 2160.152647][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.159003][ T1210] ieee802154 phy1 wpan1: encryption failed: -22 02:33:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:33:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (rerun: 64) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (rerun: 32) [ 2160.296196][ T5404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.360280][ T8751] sch_tbf: peakrate 15688 is lower than or equals to rate 1745169492 ! [ 2160.381901][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) [ 2160.434327][ T5404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.523498][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2160.556289][ T5404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.596368][ T8761] sch_tbf: peakrate 15688 is lower than or equals to rate 1745169492 ! [ 2160.671549][ T5404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2161.620289][ T5404] device hsr_slave_0 left promiscuous mode [ 2161.630561][ T5404] device hsr_slave_1 left promiscuous mode [ 2161.637206][ T5404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2161.645309][ T5404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2161.663380][ T5404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2161.689993][ T5404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2161.715747][ T5404] device bridge_slave_1 left promiscuous mode [ 2161.728217][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.746919][ T5404] device bridge_slave_0 left promiscuous mode [ 2161.758309][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.770116][ T5404] device veth1_macvtap left promiscuous mode [ 2161.780885][ T5404] device veth0_macvtap left promiscuous mode [ 2161.787002][ T5404] device veth1_vlan left promiscuous mode [ 2161.797732][ T5404] device veth0_vlan left promiscuous mode [ 2162.000308][ T5404] team0 (unregistering): Port device team_slave_1 removed [ 2162.009320][ T5125] Bluetooth: hci5: command 0x0419 tx timeout [ 2162.024232][ T5404] team0 (unregistering): Port device team_slave_0 removed [ 2162.049481][ T5404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2162.076990][ T5404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2162.188393][ T5404] bond0 (unregistering): Released all slaves [ 2162.216608][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2162.225102][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2162.240029][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2162.249766][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2162.262314][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2162.542164][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 2162.620180][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2162.627589][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.639632][ T8798] device bridge_slave_0 entered promiscuous mode [ 2162.662846][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.670067][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.680738][ T8798] device bridge_slave_1 entered promiscuous mode [ 2162.781800][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2162.831419][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2162.906310][ T8798] team0: Port device team_slave_0 added [ 2162.922994][ T8798] team0: Port device team_slave_1 added [ 2162.981066][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2162.988068][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.050478][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2163.081354][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2163.088356][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2163.150416][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2163.229119][ T8798] device hsr_slave_0 entered promiscuous mode [ 2163.237171][ T8798] device hsr_slave_1 entered promiscuous mode [ 2163.251386][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2163.259027][ T8798] Cannot create hsr debugfs directory [ 2164.167439][ T8798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2164.183736][ T8798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2164.203955][ T8798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2164.224607][ T8798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2164.310627][ T5126] Bluetooth: hci3: command 0x0409 tx timeout [ 2164.394579][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.410102][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2164.420138][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2164.444953][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.462779][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2164.481886][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2164.500929][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.508071][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.552458][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2164.562285][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2164.579077][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2164.590952][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.598078][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.626235][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2164.641199][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2164.673447][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2164.683419][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2164.694081][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2164.704575][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2164.714153][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2164.723945][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2164.740972][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2164.749602][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2164.768488][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2164.778463][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2165.182273][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2165.190275][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2165.198817][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2165.878716][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2165.888803][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2165.919157][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2165.928566][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2165.940191][ T8798] device veth0_vlan entered promiscuous mode [ 2165.959672][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2165.968714][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2165.987932][ T8798] device veth1_vlan entered promiscuous mode 02:33:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:33:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000400)="b97d36b97b285c5a1c3790d8cc88721f8746eea2b52877fb7cfcc01450b552641abc7f14c9ae7d508a1127c728e483d53cd1e5ca81de99e2fced1cd7c4d089ae8d4b40c67bbfca3aaea073c353298aaf616961d4d22e9ba9718db17afb2c7d6a5eb452c2262d49dc06b311912ea6394320126ba76a3fe394ad2dc39e44d68e06d881807dd3ba47521a49623da8b79d5dbf20c5ad29b7825cf685d11a896dc4d5a94d11a2ae030a975788bf0f851525beb2bd9d9b427a0d86f60bc17973999d26019d98542e2ba1ae5d47f3d06b58b1494847e5cafe70fb86", 0xd8, 0x2000c820, &(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xaf5aa6890475a0cc, &(0x7f0000000100)=0xffff, 0x4) [ 2166.043598][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2166.054468][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2166.063534][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2166.078541][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2166.117399][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2166.163839][ T8798] device veth0_macvtap entered promiscuous mode [ 2166.193497][ T8798] device veth1_macvtap entered promiscuous mode [ 2166.254687][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.266891][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.284234][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.307051][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.317928][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.343643][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.370601][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.381602][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.398118][ T5126] Bluetooth: hci3: command 0x041b tx timeout [ 2166.404300][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.425768][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.444205][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2166.454242][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2166.463841][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2166.472245][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2166.481354][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2166.500947][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.516486][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.527542][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.538176][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.548071][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.560654][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.571921][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.582585][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.592655][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.603278][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.614981][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2166.626025][ T8798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.635458][ T8798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.644344][ T8798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.653270][ T8798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.668275][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2166.677903][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2166.773838][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2166.791428][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2166.818247][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2166.841432][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2166.849792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2166.873887][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2168.471700][ T5126] Bluetooth: hci3: command 0x040f tx timeout [ 2170.556893][ T5126] Bluetooth: hci3: command 0x0419 tx timeout 02:33:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:33:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:33:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:33:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000400)="b97d36b97b285c5a1c3790d8cc88721f8746eea2b52877fb7cfcc01450b552641abc7f14c9ae7d508a1127c728e483d53cd1e5ca81de99e2fced1cd7c4d089ae8d4b40c67bbfca3aaea073c353298aaf616961d4d22e9ba9718db17afb2c7d6a5eb452c2262d49dc06b311912ea6394320126ba76a3fe394ad2dc39e44d68e06d881807dd3ba47521a49623da8b79d5dbf20c5ad29b7825cf685d11a896dc4d5a94d11a2ae030a975788bf0f851525beb2bd9d9b427a0d86f60bc17973999d26019d98542e2ba1ae5d47f3d06b58b1494847e5cafe70fb86", 0xd8, 0x2000c820, &(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) setsockopt$packet_int(r7, 0x107, 0xaf5aa6890475a0cc, &(0x7f0000000100)=0xffff, 0x4) 02:33:38 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r5, &(0x7f0000000300), 0x12) 02:33:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:33:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000400)="b97d36b97b285c5a1c3790d8cc88721f8746eea2b52877fb7cfcc01450b552641abc7f14c9ae7d508a1127c728e483d53cd1e5ca81de99e2fced1cd7c4d089ae8d4b40c67bbfca3aaea073c353298aaf616961d4d22e9ba9718db17afb2c7d6a5eb452c2262d49dc06b311912ea6394320126ba76a3fe394ad2dc39e44d68e06d881807dd3ba47521a49623da8b79d5dbf20c5ad29b7825cf685d11a896dc4d5a94d11a2ae030a975788bf0f851525beb2bd9d9b427a0d86f60bc17973999d26019d98542e2ba1ae5d47f3d06b58b1494847e5cafe70fb86", 0xd8, 0x2000c820, &(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xaf5aa6890475a0cc, &(0x7f0000000100)=0xffff, 0x4) [ 2183.975146][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0x3}, {0xffff, 0xc}, {0xfff2, 0xfff2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:33:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r1}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0x3}, {0xffff, 0xc}, {0xfff2, 0xfff2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2184.075546][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2184.087929][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:33:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r1}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00090000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c}]}]}}, @TCA_RATE={0x6}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0x3}, {0xffff, 0xc}, {0xfff2, 0xfff2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2184.148408][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2184.209621][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2184.248034][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:34:11 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300), 0x12) 02:34:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x5, 0x12) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:34:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) r4 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendto$packet(r4, &(0x7f0000000440)="dc703ce22fd1bf95806f1ca9f6b0c432e65fbb2fc401f982df2db1b86664d24c7b96de2e873433b2a090583436d27303dff0e176704ddd1c5e8fe6b69f4d3469383b37d0a26bac8b26bd3afe8c10d498707fcc9016f2c94282dbd5da62cd3b288773d8c104e8fcf20ab1e321cbe30c9c8908c3de1eb4666b706deebf501f398fda4f18e02528a5352eca921d971859ad4ef5441eec46935d9b9790d4c53eea9730372d710c44152b", 0xa8, 0x4010, &(0x7f0000000500)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffffffffe3b) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) socket(0x29, 0x4, 0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:34:11 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) 02:34:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a00000200000101483d0000", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r4, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) 02:34:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) write$cgroup_int(r4, &(0x7f0000000300), 0x12) [ 2216.501705][ T5436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.536389][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 02:34:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) r4 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendto$packet(r4, &(0x7f0000000440)="dc703ce22fd1bf95806f1ca9f6b0c432e65fbb2fc401f982df2db1b86664d24c7b96de2e873433b2a090583436d27303dff0e176704ddd1c5e8fe6b69f4d3469383b37d0a26bac8b26bd3afe8c10d498707fcc9016f2c94282dbd5da62cd3b288773d8c104e8fcf20ab1e321cbe30c9c8908c3de1eb4666b706deebf501f398fda4f18e02528a5352eca921d971859ad4ef5441eec46935d9b9790d4c53eea9730372d710c44152b", 0xa8, 0x4010, &(0x7f0000000500)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffffffffe3b) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) socket(0x29, 0x4, 0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) [ 2216.609061][ T5436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:34:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) r4 = accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendto$packet(r4, &(0x7f0000000440)="dc703ce22fd1bf95806f1ca9f6b0c432e65fbb2fc401f982df2db1b86664d24c7b96de2e873433b2a090583436d27303dff0e176704ddd1c5e8fe6b69f4d3469383b37d0a26bac8b26bd3afe8c10d498707fcc9016f2c94282dbd5da62cd3b288773d8c104e8fcf20ab1e321cbe30c9c8908c3de1eb4666b706deebf501f398fda4f18e02528a5352eca921d971859ad4ef5441eec46935d9b9790d4c53eea9730372d710c44152b", 0xa8, 0x4010, &(0x7f0000000500)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffffffffe3b) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) socket(0x29, 0x4, 0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) (async) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async) sendto$packet(r4, &(0x7f0000000440)="dc703ce22fd1bf95806f1ca9f6b0c432e65fbb2fc401f982df2db1b86664d24c7b96de2e873433b2a090583436d27303dff0e176704ddd1c5e8fe6b69f4d3469383b37d0a26bac8b26bd3afe8c10d498707fcc9016f2c94282dbd5da62cd3b288773d8c104e8fcf20ab1e321cbe30c9c8908c3de1eb4666b706deebf501f398fda4f18e02528a5352eca921d971859ad4ef5441eec46935d9b9790d4c53eea9730372d710c44152b", 0xa8, 0x4010, &(0x7f0000000500)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffffffffffe3b) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2012afc0542c05680a0000020000010100000000", @ANYRES32], 0x20}}, 0x0) (async) socket(0x29, 0x4, 0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000013400eeffffffffff65f163be00", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e000000000000020000009efb", @ANYRES32=r5, @ANYBLOB="00000000ffffffff001e004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000280)="4105092c611e48040702022ec52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777effdffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x800, 0x0, 0x2f) (async) [ 2216.727389][ T5436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.847138][ T5436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.878248][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2216.902819][ T9036] ------------[ cut here ]------------ [ 2216.908611][ T9036] WARNING: CPU: 0 PID: 9036 at net/core/dev.c:3265 skb_checksum_help+0x4a2/0x600 [ 2216.917896][ T9036] Modules linked in: [ 2216.921875][ T9036] CPU: 0 PID: 9036 Comm: syz-executor.2 Not tainted 6.2.0-rc4-syzkaller-00839-gc554520f2cbe #0 [ 2216.932313][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2216.942458][ T9036] RIP: 0010:skb_checksum_help+0x4a2/0x600 [ 2216.948248][ T9036] Code: e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 03 1f b9 f9 48 89 ef 41 bc ea ff ff ff e8 35 f9 ff ff eb d4 e8 ee 1e b9 f9 <0f> 0b 0f b6 1d c2 c1 95 06 31 ff 89 de e8 4c 1b b9 f9 84 db 0f 84 [ 2216.967988][ T9036] RSP: 0018:ffffc9000338efb0 EFLAGS: 00010293 [ 2216.974159][ T9036] RAX: 0000000000000000 RBX: 000000000000048a RCX: 0000000000000000 [ 2216.982305][ T9036] RDX: ffff88806b0ad7c0 RSI: ffffffff87c843b2 RDI: 0000000000000004 [ 2216.990313][ T9036] RBP: ffff888020e89c80 R08: 0000000000000004 R09: 0000000000000074 [ 2216.998376][ T9036] R10: 000000000000047a R11: ffff888076ff3600 R12: ffff888020e89cf4 [ 2217.006443][ T9036] R13: 0000000000001e61 R14: ffff888020e89d00 R15: 000000000000047a [ 2217.014508][ T9036] FS: 00007f6864ad7700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2217.023538][ T9036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2217.030164][ T9036] CR2: 0000000020005000 CR3: 000000004ae86000 CR4: 00000000003506f0 [ 2217.038213][ T9036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2217.046266][ T9036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2217.054334][ T9036] Call Trace: [ 2217.057641][ T9036] [ 2217.060684][ T9036] skb_csum_hwoffload_help+0x12a/0x1e0 [ 2217.066196][ T9036] validate_xmit_skb+0xb87/0xea0 [ 2217.071249][ T9036] __dev_queue_xmit+0x9d4/0x3ba0 [ 2217.076257][ T9036] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2217.081670][ T9036] ? find_held_lock+0x2d/0x110 [ 2217.086577][ T9036] ? __ip_finish_output+0x396/0x650 [ 2217.091959][ T9036] ? lock_downgrade+0x6e0/0x6e0 [ 2217.096864][ T9036] ? ip_finish_output2+0x1bd0/0x2180 [ 2217.102259][ T9036] ip_finish_output2+0x14e3/0x2180 [ 2217.107426][ T9036] ? ip_fragment.constprop.0+0x240/0x240 [ 2217.113168][ T9036] ? ip_mc_finish_output+0x5a0/0x5a0 [ 2217.118509][ T9036] __ip_finish_output+0x396/0x650 [ 2217.123652][ T9036] ip_finish_output+0x31/0x280 [ 2217.128480][ T9036] ip_output+0x1a3/0x320 [ 2217.132829][ T9036] ip_local_out+0xb3/0x1a0 [ 2217.137295][ T9036] iptunnel_xmit+0x67e/0x9f0 [ 2217.142101][ T9036] geneve_xmit+0x1318/0x4910 [ 2217.146801][ T9036] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2217.152908][ T9036] ? geneve_init_net+0x310/0x310 [ 2217.157921][ T9036] ? dev_queue_xmit_nit+0x81a/0xb10 [ 2217.163246][ T9036] ? lock_downgrade+0x6e0/0x6e0 [ 2217.168152][ T9036] dev_hard_start_xmit+0x1c2/0x990 [ 2217.173414][ T9036] sch_direct_xmit+0x1a3/0xbe0 [ 2217.178310][ T9036] ? ktime_get+0x38e/0x470 [ 2217.182922][ T9036] ? ktime_get+0x30f/0x470 [ 2217.187403][ T9036] ? dev_watchdog+0x980/0x980 [ 2217.192225][ T9036] ? tbf_dequeue+0x8e0/0xda0 [ 2217.196987][ T9036] __qdisc_run+0x4da/0x1750 [ 2217.201628][ T9036] ? dev_qdisc_enqueue+0x5f/0x390 [ 2217.206719][ T9036] __dev_queue_xmit+0x230b/0x3ba0 [ 2217.211885][ T9036] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2217.217216][ T9036] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 2217.223171][ T9036] ? virtio_net_hdr_to_skb.constprop.0+0xa63/0x1230 [ 2217.229880][ T9036] ? packet_parse_headers+0x980/0x980 [ 2217.235408][ T9036] packet_sendmsg+0x334c/0x5500 [ 2217.240407][ T9036] ? aa_sk_perm+0x313/0xab0 [ 2217.245029][ T9036] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 2217.251038][ T9036] ? aa_af_perm+0x240/0x240 [ 2217.255604][ T9036] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2217.261090][ T9036] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 2217.267041][ T9036] sock_sendmsg+0xde/0x190 [ 2217.271669][ T9036] __sys_sendto+0x23a/0x340 [ 2217.276226][ T9036] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2217.281713][ T9036] ? __local_bh_enable_ip+0xa4/0x130 [ 2217.287064][ T9036] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 2217.293158][ T9036] ? xfd_validate_state+0x5d/0x180 [ 2217.298307][ T9036] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2217.304340][ T9036] __x64_sys_sendto+0xe1/0x1b0 [ 2217.309141][ T9036] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2217.315199][ T9036] do_syscall_64+0x39/0xb0 [ 2217.319650][ T9036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2217.325759][ T9036] RIP: 0033:0x7f6863c8c0c9 [ 2217.330206][ T9036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2217.349927][ T9036] RSP: 002b:00007f6864ad7168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2217.358452][ T9036] RAX: ffffffffffffffda RBX: 00007f6863dabf80 RCX: 00007f6863c8c0c9 [ 2217.366524][ T9036] RDX: 0000000000005c13 RSI: 0000000020000280 RDI: 0000000000000003 [ 2217.374589][ T9036] RBP: 00007f6863ce7ae9 R08: 0000000000000000 R09: 000000000000002f [ 2217.382671][ T9036] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 2217.390733][ T9036] R13: 00007ffcd9c3468f R14: 00007f6864ad7300 R15: 0000000000022000 [ 2217.398766][ T9036] [ 2217.401880][ T9036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2217.409186][ T9036] CPU: 0 PID: 9036 Comm: syz-executor.2 Not tainted 6.2.0-rc4-syzkaller-00839-gc554520f2cbe #0 [ 2217.419577][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2217.429686][ T9036] Call Trace: [ 2217.432991][ T9036] [ 2217.435942][ T9036] dump_stack_lvl+0xd1/0x138 [ 2217.440615][ T9036] panic+0x2cc/0x626 [ 2217.444575][ T9036] ? panic_print_sys_info.part.0+0x110/0x110 [ 2217.450621][ T9036] ? skb_checksum_help+0x4a2/0x600 [ 2217.455774][ T9036] check_panic_on_warn.cold+0x19/0x35 [ 2217.461205][ T9036] __warn+0xf2/0x1a0 [ 2217.465147][ T9036] ? skb_checksum_help+0x4a2/0x600 [ 2217.470308][ T9036] report_bug+0x1c0/0x210 [ 2217.474768][ T9036] handle_bug+0x3c/0x70 [ 2217.478964][ T9036] exc_invalid_op+0x18/0x50 [ 2217.483509][ T9036] asm_exc_invalid_op+0x1a/0x20 [ 2217.488408][ T9036] RIP: 0010:skb_checksum_help+0x4a2/0x600 [ 2217.494173][ T9036] Code: e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 03 1f b9 f9 48 89 ef 41 bc ea ff ff ff e8 35 f9 ff ff eb d4 e8 ee 1e b9 f9 <0f> 0b 0f b6 1d c2 c1 95 06 31 ff 89 de e8 4c 1b b9 f9 84 db 0f 84 [ 2217.513823][ T9036] RSP: 0018:ffffc9000338efb0 EFLAGS: 00010293 [ 2217.519927][ T9036] RAX: 0000000000000000 RBX: 000000000000048a RCX: 0000000000000000 [ 2217.527932][ T9036] RDX: ffff88806b0ad7c0 RSI: ffffffff87c843b2 RDI: 0000000000000004 [ 2217.535938][ T9036] RBP: ffff888020e89c80 R08: 0000000000000004 R09: 0000000000000074 [ 2217.543940][ T9036] R10: 000000000000047a R11: ffff888076ff3600 R12: ffff888020e89cf4 [ 2217.551946][ T9036] R13: 0000000000001e61 R14: ffff888020e89d00 R15: 000000000000047a [ 2217.559996][ T9036] ? skb_checksum_help+0x4a2/0x600 [ 2217.565169][ T9036] skb_csum_hwoffload_help+0x12a/0x1e0 [ 2217.570674][ T9036] validate_xmit_skb+0xb87/0xea0 [ 2217.575675][ T9036] __dev_queue_xmit+0x9d4/0x3ba0 [ 2217.580672][ T9036] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2217.586044][ T9036] ? find_held_lock+0x2d/0x110 [ 2217.590862][ T9036] ? __ip_finish_output+0x396/0x650 [ 2217.596101][ T9036] ? lock_downgrade+0x6e0/0x6e0 [ 2217.600996][ T9036] ? ip_finish_output2+0x1bd0/0x2180 [ 2217.606324][ T9036] ip_finish_output2+0x14e3/0x2180 [ 2217.611494][ T9036] ? ip_fragment.constprop.0+0x240/0x240 [ 2217.617174][ T9036] ? ip_mc_finish_output+0x5a0/0x5a0 [ 2217.622542][ T9036] __ip_finish_output+0x396/0x650 [ 2217.627610][ T9036] ip_finish_output+0x31/0x280 [ 2217.632441][ T9036] ip_output+0x1a3/0x320 [ 2217.636725][ T9036] ip_local_out+0xb3/0x1a0 [ 2217.641191][ T9036] iptunnel_xmit+0x67e/0x9f0 [ 2217.645833][ T9036] geneve_xmit+0x1318/0x4910 [ 2217.650471][ T9036] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2217.656601][ T9036] ? geneve_init_net+0x310/0x310 [ 2217.661604][ T9036] ? dev_queue_xmit_nit+0x81a/0xb10 [ 2217.666848][ T9036] ? lock_downgrade+0x6e0/0x6e0 [ 2217.671755][ T9036] dev_hard_start_xmit+0x1c2/0x990 [ 2217.676924][ T9036] sch_direct_xmit+0x1a3/0xbe0 [ 2217.681729][ T9036] ? ktime_get+0x38e/0x470 [ 2217.686187][ T9036] ? ktime_get+0x30f/0x470 [ 2217.690651][ T9036] ? dev_watchdog+0x980/0x980 [ 2217.695368][ T9036] ? tbf_dequeue+0x8e0/0xda0 [ 2217.700003][ T9036] __qdisc_run+0x4da/0x1750 [ 2217.704565][ T9036] ? dev_qdisc_enqueue+0x5f/0x390 [ 2217.709633][ T9036] __dev_queue_xmit+0x230b/0x3ba0 [ 2217.714715][ T9036] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2217.720045][ T9036] ? csum_and_copy_from_iter+0x12e0/0x12e0 [ 2217.725909][ T9036] ? virtio_net_hdr_to_skb.constprop.0+0xa63/0x1230 [ 2217.732563][ T9036] ? packet_parse_headers+0x980/0x980 [ 2217.738012][ T9036] packet_sendmsg+0x334c/0x5500 [ 2217.742947][ T9036] ? aa_sk_perm+0x313/0xab0 [ 2217.747494][ T9036] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 2217.753438][ T9036] ? aa_af_perm+0x240/0x240 [ 2217.757997][ T9036] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2217.763348][ T9036] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 2217.769302][ T9036] sock_sendmsg+0xde/0x190 [ 2217.773774][ T9036] __sys_sendto+0x23a/0x340 [ 2217.778339][ T9036] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2217.783778][ T9036] ? __local_bh_enable_ip+0xa4/0x130 [ 2217.789116][ T9036] ? __ia32_sys_get_robust_list+0x3b0/0x3b0 [ 2217.795147][ T9036] ? xfd_validate_state+0x5d/0x180 [ 2217.800304][ T9036] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2217.806270][ T9036] __x64_sys_sendto+0xe1/0x1b0 [ 2217.811074][ T9036] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2217.817099][ T9036] do_syscall_64+0x39/0xb0 [ 2217.821552][ T9036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2217.827506][ T9036] RIP: 0033:0x7f6863c8c0c9 [ 2217.831947][ T9036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2217.852025][ T9036] RSP: 002b:00007f6864ad7168 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2217.860479][ T9036] RAX: ffffffffffffffda RBX: 00007f6863dabf80 RCX: 00007f6863c8c0c9 [ 2217.868572][ T9036] RDX: 0000000000005c13 RSI: 0000000020000280 RDI: 0000000000000003 [ 2217.876572][ T9036] RBP: 00007f6863ce7ae9 R08: 0000000000000000 R09: 000000000000002f [ 2217.884571][ T9036] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 2217.892565][ T9036] R13: 00007ffcd9c3468f R14: 00007f6864ad7300 R15: 0000000000022000 [ 2217.900584][ T9036] [ 2217.903684][ T9036] Kernel Offset: disabled [ 2217.908130][ T9036] Rebooting in 86400 seconds..