9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157999c82bd151bee0c67f3e6642ef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a219d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e94849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322c887d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a753d1c5c85475e286c548da6f669e5c34afc272e5a32f27264d9210acec3b65a264fd5e85d5f44979431eab3fcd8d33d54"], &(0x7f0000001300)='GPL\x00', 0x3c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x80) 00:28:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a00000001500000000000000850000000800000095000000000000009e98bf4ee27c853474477453ce8006c7b7317d6555069b5fb1ed4da4026a35575388e82f7eb52952dd857dd5f276cd90d67640dca93a7a841db079fb2b4f23d127b61c933ab8ac76d15487cd6ea2c802da515ca1fd0640886e1acd925abea4ad45a8c4d4a7bcaa64a22a8ff98db21813079a797778a1d1a2bca842031c66e170e41a189545580b0a14fbd3859783c27ff96c7fd27f0d9f2915e67ad07d23787e3234eaba5ab74cc50e0f5fab7ce0"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) 00:28:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x18, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) 00:28:43 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x18, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) 00:28:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:43 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a00000001500000000000000850000000800000095000000000000009e98bf4ee27c853474477453ce8006c7b7317d6555069b5fb1ed4da4026a35575388e82f7eb52952dd857dd5f276cd90d67640dca93a7a841db079fb2b4f23d127b61c933ab8ac76d15487cd6ea2c802da515ca1fd0640886e1acd925abea4ad45a8c4d4a7bcaa64a22a8ff98db21813079a797778a1d1a2bca842031c66e170e41a189545580b0a14fbd3859783c27ff96c7fd27f0d9f2915e67ad07d23787e3234eaba5ab74cc50e0f5fab7ce0"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) 00:28:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x18, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) 00:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r2}, 0x20) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0xff, 0x7, 0x14, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x85}, 0x8050) r4 = socket(0x2c, 0x3, 0x0) socket(0xf, 0x0, 0x5) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '\x00'}], 0xa, "3760d209f38edfbececb7fcea7ba80bfc0457ad312e08596d1784f8f7367d7b0daf180b662f1bc0e545d963c59bbb392fb141f91133323a5f407ccfc9d55efdbbdcb7bc8b63242f28b48b5"}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000200)=@buf="b1bb94ba7a99bacc9d775d2ad21849325276405f9eb0bdc6681a143a9149e3781d7e659787ec7de6beb511d5222c0132e3bbfba48ce326d512e95d326e4f7966cf5b33d8a15d9d54b80cc8d34b57d0a835d8adbf4127a9ba5c8ee804c938b800884d52620357e7351336035883bea5c6f84faaf2944e35740f89b697abe5a4a245765c4fc2971840", 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r6 = socket(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl0\x00', r3, 0x29, 0x6, 0x81, 0xa2, 0x29, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x80, 0x8000, 0x1ff, 0x10000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="90c673740a85e4aa48e6e982d31ec3363e6fe590f9902e3e5fe550c474487e597c8f548358f87b4a5bcfbf2bae7ece4545026a15831ed64249cdfbf0745a43e69b24227617c95f41eccb1af61f807b5841080cbb2a6093fd8605a52bf86d9569366104cae50eaebb9c5d75a7ecc12c9412a1bfa88b0fae79feec8bdf2416ca671cb1", &(0x7f0000000540)=""/224, &(0x7f0000000640)="9870f39065a2f847903a5ad921b59c8c08c2dfafa93abd7f8be889cf94c7ea620e781dee25d4cbfa3d52335af68c37fb70de9920b402797a50e1bd92cfe8507df17102c9c27b133929f51ddbde202c64c7a3fbe8590364c52652614989e696967d43d2dd195418c3e256a379813cb7119df2d7de3c3d8db18938f2348f744f03d3a10d07379604940d4d61696c5499d215f366a2dcb5ae3b1a2ef11fa828629df4bc2f56162e4a2d4d7de909551916", &(0x7f0000000700)="5184b1766e7b448fca65f36e0942be10b66108d08042", 0x3f, r5, 0x4}, 0x38) 00:28:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x18, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) 00:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 791.310838][ T27] audit: type=1804 audit(1681518524.162:727): pid=23958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/987/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 00:28:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a00000001500000000000000850000000800000095000000000000009e98bf4ee27c853474477453ce8006c7b7317d6555069b5fb1ed4da4026a35575388e82f7eb52952dd857dd5f276cd90d67640dca93a7a841db079fb2b4f23d127b61c933ab8ac76d15487cd6ea2c802da515ca1fd0640886e1acd925abea4ad45a8c4d4a7bcaa64a22a8ff98db21813079a797778a1d1a2bca842031c66e170e41a189545580b0a14fbd3859783c27ff96c7fd27f0d9f2915e67ad07d23787e3234eaba5ab74cc50e0f5fab7ce0"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) 00:28:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) [ 791.427922][ T27] audit: type=1804 audit(1681518524.192:728): pid=23958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/987/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 00:28:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:28:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:28:44 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000a00000001500000000000000850000000800000095000000000000009e98bf4ee27c853474477453ce8006c7b7317d6555069b5fb1ed4da4026a35575388e82f7eb52952dd857dd5f276cd90d67640dca93a7a841db079fb2b4f23d127b61c933ab8ac76d15487cd6ea2c802da515ca1fd0640886e1acd925abea4ad45a8c4d4a7bcaa64a22a8ff98db21813079a797778a1d1a2bca842031c66e170e41a189545580b0a14fbd3859783c27ff96c7fd27f0d9f2915e67ad07d23787e3234eaba5ab74cc50e0f5fab7ce0"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x2000000, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x12c4}, 0x28) 00:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000edb000/0x1000)=nil, 0x1000, 0x0, 0x22011, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 00:28:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 791.951634][ T27] audit: type=1804 audit(1681518524.802:729): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/988/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 792.020992][ T27] audit: type=1804 audit(1681518524.832:730): pid=24001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/988/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 792.157121][ T27] audit: type=1804 audit(1681518525.002:731): pid=24015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3698032000/syzkaller.F8TJle/981/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 00:28:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) [ 792.262063][ T27] audit: type=1804 audit(1681518525.052:732): pid=24014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/787/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 00:28:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:28:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) [ 792.349751][ T27] audit: type=1804 audit(1681518525.052:733): pid=24014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/787/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 00:28:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:28:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) [ 792.491167][ T27] audit: type=1804 audit(1681518525.082:734): pid=24011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3698032000/syzkaller.F8TJle/981/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 00:28:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@local}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 00:28:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 792.899521][ T27] audit: type=1804 audit(1681518525.752:735): pid=24032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/989/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 792.977074][ T27] audit: type=1804 audit(1681518525.802:736): pid=24032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/989/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 00:28:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:46 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:28:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f07e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x7, r7}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) getsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r9 = socket(0x22, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r12, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000bfdeb7bf00000000000800000a010000", @ANYRES32=r12, @ANYBLOB="05000000000000000000f1fff8b76284cda17898023331"], 0x40}}, 0x0) 00:28:46 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 793.327581][T24067] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:28:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:28:46 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x0, 0x0, 0x98, 0x318, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) [ 793.527056][T24067] bond11: entered promiscuous mode [ 793.555978][T24067] 8021q: adding VLAN 0 to HW filter on device bond11 [ 793.603952][T24083] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING 00:28:46 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x0, 0x0, 0x98, 0x318, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 00:28:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000002a40)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 793.714035][T24078] bond11: (slave bridge27): making interface the new active one [ 793.757357][T24078] bridge27: entered promiscuous mode [ 793.783818][T24091] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 793.799764][T24078] bond11: (slave bridge27): Enslaving as an active interface with an up link 00:28:46 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x0, 0x0, 0x98, 0x318, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) [ 793.857931][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 793.902973][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f07e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x7, r7}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) getsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r9 = socket(0x22, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r12, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000bfdeb7bf00000000000800000a010000", @ANYRES32=r12, @ANYBLOB="05000000000000000000f1fff8b76284cda17898023331"], 0x40}}, 0x0) [ 793.952613][T24098] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING 00:28:46 executing program 4: r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x0, 0x0, 0x0, 0x98, 0x318, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x318}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) 00:28:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) [ 794.173951][T24105] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 794.196775][T24103] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:28:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) [ 794.337225][T24103] bond12: entered promiscuous mode 00:28:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) [ 794.363924][T24103] 8021q: adding VLAN 0 to HW filter on device bond12 00:28:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) [ 794.524906][T24115] bond12: (slave bridge30): making interface the new active one 00:28:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) [ 794.568680][T24115] bridge30: entered promiscuous mode 00:28:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) [ 794.619556][T24115] bond12: (slave bridge30): Enslaving as an active interface with an up link [ 794.630964][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 794.726850][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) 00:28:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f07e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x7, r7}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) getsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r9 = socket(0x22, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r12, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000bfdeb7bf00000000000800000a010000", @ANYRES32=r12, @ANYBLOB="05000000000000000000f1fff8b76284cda17898023331"], 0x40}}, 0x0) 00:28:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 00:28:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) 00:28:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) 00:28:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0xff, 0x11}, 0x48) 00:28:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) 00:28:48 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x1626000, 0x800}, 0x20) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:28:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) 00:28:48 executing program 2: pipe(&(0x7f0000000380)) r0 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) [ 795.257884][T24149] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:28:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000380), 0x4) [ 795.382734][T24149] bond13: entered promiscuous mode [ 795.409456][T24149] 8021q: adding VLAN 0 to HW filter on device bond13 00:28:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:48 executing program 2: pipe(&(0x7f0000000380)) r0 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) [ 795.542837][T24149] bond13: (slave bridge33): making interface the new active one [ 795.587943][T24149] bridge33: entered promiscuous mode [ 795.618246][T24149] bond13: (slave bridge33): Enslaving as an active interface with an up link [ 795.631504][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 795.675902][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f07e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010008506eb9afc4cd8d06e754a0081c5", @ANYRES32=r7, @ANYBLOB="2377f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@private2, 0x7, r7}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) getsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r9 = socket(0x22, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r12, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000bfdeb7bf00000000000800000a010000", @ANYRES32=r12, @ANYBLOB="05000000000000000000f1fff8b76284cda17898023331"], 0x40}}, 0x0) 00:28:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000024001d0f04deff000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736671"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006600310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000fcffffff"], 0x24}}, 0x0) 00:28:48 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0x358, 0x378, 0x1c, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@empty, [], @ipv6=@dev}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 00:28:48 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x1626000, 0x800}, 0x20) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:28:48 executing program 2: pipe(&(0x7f0000000380)) r0 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) 00:28:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:48 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0x358, 0x378, 0x1c, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@empty, [], @ipv6=@dev}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 00:28:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:48 executing program 2: pipe(&(0x7f0000000380)) r0 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) [ 796.029451][T24188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:49 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0x358, 0x378, 0x1c, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@empty, [], @ipv6=@dev}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) [ 796.132585][T24193] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x58}}, 0x0) [ 796.242899][T24203] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 796.351457][T24203] bond14: entered promiscuous mode [ 796.357026][T24203] 8021q: adding VLAN 0 to HW filter on device bond14 [ 796.423998][T24212] bond14: (slave bridge36): making interface the new active one [ 796.468715][T24212] bridge36: entered promiscuous mode [ 796.475403][T24212] bond14: (slave bridge36): Enslaving as an active interface with an up link [ 796.485008][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 796.574752][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:49 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0xac, 0x0, {[{{@uncond, 0x10, 0x358, 0x378, 0x1c, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@empty, [], @ipv6=@dev}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) 00:28:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x58}}, 0x0) 00:28:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000024001d0f04deff000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736671"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006600310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000fcffffff"], 0x24}}, 0x0) 00:28:49 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="80a057314437702db5ef78883ee8a16915efe92fb7ad4443ad0b50feaba3fcf051a44eb07b348f4e81577abf319ed40e3a2bf19972af70d751789c7963cc3e234dc85238214e8b9c16ba924289f35482186c955d3cdeb58e3f00414b5f47bd0465ecfe98e3943bcadaca8830142ecaf78a8c8ef3958f1c67efdb1c5add6722a282114be81b3abcd1f547264478f2eb1bbd55e6cf582eaded34c3afdf020000005dc3aa1c81a65ecbe4c047c6bfc9f87dfd652b2b9eeeafd852ace7bcbe5c23cc5d522dbab8a4e3b8860cf829d4ca3372530dd0e392a2bab030b51410c3326b83e4a2a234df9e5f0ab1eb93ba8a8a318aa84423ab000000000000000000", 0xfd}], 0x2, 0x0, 0x0, 0x880}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x1626000, 0x800}, 0x20) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:28:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000b000b00000056000100534547b600c5224bf7fc0e5d6a251087d2e41b7b6dd39ad9add5e2acc109bc6e7dfdbfaeb2d6f4bbb1d133bfd2f895c694a6c8d148d052436e0c33a975989fb010499688d8f80f894b40dbae5d5550e4743a00000800020005"], 0x84}}, 0x0) 00:28:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@ccm_128={{0x0, 0x37}, "000000000000e400", "7422c5b8f71bf57b942bda03dccbc46a", '\x00', "034d1370d3e5c8d4"}, 0x28) 00:28:49 executing program 3: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) [ 796.999477][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x58}}, 0x0) [ 797.065495][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:28:49 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x8924, &(0x7f0000000140)=""/4096) [ 797.152401][T24225] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x24}}, 0x0) 00:28:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000024001d0f04deff000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736671"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006600310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000fcffffff"], 0x24}}, 0x0) 00:28:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x58}}, 0x0) [ 797.236972][T24236] ip6erspan0: tun_chr_ioctl cmd 35108 00:28:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x8924, &(0x7f0000000140)=""/4096) 00:28:50 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x1626000, 0x800}, 0x20) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 797.350910][T24240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 00:28:50 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebf4e4309ebcdac5f7a860c00269c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc073527f81070545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e20000000000000020269ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed72da90864987f30926c9013eec3b86836ae504479f60b0ec920ae654d2b85627aa5a79f37eeae3023a8499800000000008f02712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91db3768c1ca6a44100ecc99a61a209b887af2c85c2d9ab030000000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d1e1298f411432010e1004dae58b3b5b89709b0ff47b200000000000000cbefd9a6bb70f60eb9c0557c67a1d9f00e1dd2fc79a957c84f3369dcd548b3d360c4b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f92739d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322cc7ca253ff2fb0882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e2076234f0bec1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de85573d12986d6d74e71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a43487d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff07f1744de341b59034959a1289ba6e243668e671d305707e3de7652afc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aafc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c25e45447b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb8f35721e43e33883cf16ed1dd38e6131ba0a3723b0a4262b7023c22d4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65856eb55db8cbcba4b8de1f0d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a519e5a904d8c389d8bc09242806d6849914c1787cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d85c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c189704bb2cd7a2356397f1a0a23e662e2a6c484de616f35964c0e8567e34400cbaa41c3c574e6e6aefb7e49f968bbe0e0bf9878516f532639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483be1920efcb4fa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be8415c3850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a78da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828346f9c009adb5b2251461a1b24bb68f486e172932ecb204b4d807536a75942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841020a645d1cc9ec4eee79c290fb0ba939b137a7044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b30a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fdf1f24dca336cbd87f3667cf56d62d4f75ab98d8f8c74f814047cb9127e1ce796dd52c8683bdd2065d163cb1b56022d09d5f47b360cc962d17615e6803039b891aff4fa4b08a10c81edc5dfd792e2feb16d23ae43ddc0553558e16d2f65d148bcc6c5b7d6d01227439bf9c551b2d9d9e682fd0256ce5847666e995c237ee93a40d2f7bdab2ca593131ad0fa79751d985ad37dc5c14832b11c64fc735df7309944aad028972def26ae4e080c5f1e83d5490eae3b8af1b486ecb246080b4cbebac1d71994dd0579bd0b4acb2178625d676212b08119d0f3b5d8c2ac0a5472a999b662e5c5b524b98609e22d34a3e92036b1755ff7930e628f0a52bebaee7462dc4ff1052fffddb715ea1d38fe1b1df845619d105b58875107122ff5d498ca9ead648fbb02a02e9c8293775b13eb3236ab4680f97b074fa31ff24b925918ad067f719094f857f52c38570517e9097f88e88ac72b3bee453f2fe00f99763a20f5e1b7f3811feb7c702f20d8a19fbbdae1995db02b319f401a2af742f2079d90a4f067bc85ec88ff08b946d5634181c3d62116dd0510d8bcd37490cf088a819c37e51d24887f9cff995117d537cfafa55cd9f01c5c5e92afe73b36d848f5ee3f247db0a9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 00:28:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000024001d0f04deff000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000008000100736671"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006600310f00"/20, @ANYRES32=r2, @ANYBLOB="00000000fcffffff"], 0x24}}, 0x0) [ 797.533653][T24254] ip6erspan0: tun_chr_ioctl cmd 35108 00:28:51 executing program 3: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x8924, &(0x7f0000000140)=""/4096) 00:28:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 00:28:51 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:51 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 00:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 00:28:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x50, r1, 0x1, 0x0, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 00:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) [ 798.319177][T24270] ip6erspan0: tun_chr_ioctl cmd 35108 00:28:51 executing program 2: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1) ioctl$TUNGETFILTER(r0, 0x8924, &(0x7f0000000140)=""/4096) 00:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) [ 798.590785][T24284] ip6erspan0: tun_chr_ioctl cmd 35108 00:28:52 executing program 3: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:52 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:52 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:52 executing program 1: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:52 executing program 5: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:52 executing program 2: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:52 executing program 4: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:52 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7c2}) 00:28:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x17}]}, 0x18}}, 0x0) 00:28:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x17}]}, 0x18}}, 0x0) 00:28:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 00:28:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 00:28:53 executing program 3: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x17}]}, 0x18}}, 0x0) 00:28:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 00:28:54 executing program 1: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:54 executing program 5: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:54 executing program 2: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x17}]}, 0x18}}, 0x0) 00:28:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 00:28:54 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224d442017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88afc6002084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51f25afd5e17094b2fa40f1d696e2e6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30b090000008bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e2359c41cfb426e1230bc1cd4c02c460ceb44276e9bdae07e457b7ccc70a81949c813594d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7289de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486af8dd600000000000000000000c7766ea7c581782c0d90f42a85303835b4a841fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd028f4fd73f8c541e4620d47962b92a5449c0fa83057483a22d646f97672dd6e0d8b7b667eaa953b8f03f730c74322e23fb5866b723b0e846a3c412af4c64b16dd43dcf95612ca8c"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:54 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x81, 0x3ff}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x5, 0x4) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x17f05, 0x0) 00:28:54 executing program 4: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x10, &(0x7f0000000000)={0x2, [0x10002]}, 0x10) 00:28:54 executing program 4: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x10, &(0x7f0000000000)={0x2, [0x10002]}, 0x10) 00:28:56 executing program 1: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:56 executing program 4: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x10, &(0x7f0000000000)={0x2, [0x10002]}, 0x10) 00:28:56 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:56 executing program 3: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 802.116994][T24362] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 803.451945][T24378] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:56 executing program 5: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000005c0)=0x1ff, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001700)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r5, r6, 0x0, 0xf03b0000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x400, @empty}}, 0x1, 0x2, 0x2bf, 0x1, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x20, 0x2, 0xb1dc}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0xfffffe63) sendto$inet6(r7, &(0x7f0000000400)="6050ec66010021fe52bfe21202c67041ac4bb407d764cdddf22608c9b923e90702bf932fa4f35526496266ce355f768927f648d52fd6b0d634df4d1a3810559ef952669c5bd16b45a2ff1b26b5061eb1aaffc7703bb99b5ea6f3e87956df4df7", 0x60, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @loopback, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000002c40)) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x10000, &(0x7f0000002c80)={0x0, 0x3938700}) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xea, 0x40, 0x2, 0x9, 0x7f, 0x74, 0x7, 0x3, 0x0, 0x5, 0xd, 0xfc}, 0xe) sendfile(r7, r4, &(0x7f0000000100)=0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8, 0x4, 0x10}, 0xc) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7a842f274f34", 0x98, 0x2000c011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 00:28:56 executing program 4: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x10, &(0x7f0000000000)={0x2, [0x10002]}, 0x10) 00:28:56 executing program 2: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="80315655d4273f9097e99c8e09caa20de662e9e5b891bfb6f3a2f2fad46fcdffc334ae9941ebc708f134bbabda93007805a3054e9c7c8bd585c6affb33edda93c8278a95b8894fdecb2b91da935091d1583e0ff19522a047b1506470de22a1cdb827d397d5e1be9647a0a79fba1a1f07e993099c789f7ff7666dc569afffe3b6f181d10ed7346dabee65e7cc046e0c5ba241b33ed41b6fe700641aa778f09b48509317bc1f3f6904098e9312cb2be4fe40645ff340992d7931eb987d6a551efe63c0c65b1a97deeef280fc809c3ef4a3a1e2598844cbeb0c657fc64adcd256e916ddbf1aa9c78b6cef645abd6692ac434febb2e4ea372f2defb8d0", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:56 executing program 4: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224d442017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88afc6002084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51f25afd5e17094b2fa40f1d696e2e6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30b090000008bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e2359c41cfb426e1230bc1cd4c02c460ceb44276e9bdae07e457b7ccc70a81949c813594d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7289de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486af8dd600000000000000000000c7766ea7c581782c0d90f42a85303835b4a841fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd028f4fd73f8c541e4620d47962b92a5449c0fa83057483a22d646f97672dd6e0d8b7b667eaa953b8f03f730c74322e23fb5866b723b0e846a3c412af4c64b16dd43dcf95612ca8c"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:56 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="80315655d4273f9097e99c8e09caa20de662e9e5b891bfb6f3a2f2fad46fcdffc334ae9941ebc708f134bbabda93007805a3054e9c7c8bd585c6affb33edda93c8278a95b8894fdecb2b91da935091d1583e0ff19522a047b1506470de22a1cdb827d397d5e1be9647a0a79fba1a1f07e993099c789f7ff7666dc569afffe3b6f181d10ed7346dabee65e7cc046e0c5ba241b33ed41b6fe700641aa778f09b48509317bc1f3f6904098e9312cb2be4fe40645ff340992d7931eb987d6a551efe63c0c65b1a97deeef280fc809c3ef4a3a1e2598844cbeb0c657fc64adcd256e916ddbf1aa9c78b6cef645abd6692ac434febb2e4ea372f2defb8d0", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 803.589606][T24381] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:57 executing program 3: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224d442017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88afc6002084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51f25afd5e17094b2fa40f1d696e2e6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30b090000008bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e2359c41cfb426e1230bc1cd4c02c460ceb44276e9bdae07e457b7ccc70a81949c813594d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7289de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486af8dd600000000000000000000c7766ea7c581782c0d90f42a85303835b4a841fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd028f4fd73f8c541e4620d47962b92a5449c0fa83057483a22d646f97672dd6e0d8b7b667eaa953b8f03f730c74322e23fb5866b723b0e846a3c412af4c64b16dd43dcf95612ca8c"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="80315655d4273f9097e99c8e09caa20de662e9e5b891bfb6f3a2f2fad46fcdffc334ae9941ebc708f134bbabda93007805a3054e9c7c8bd585c6affb33edda93c8278a95b8894fdecb2b91da935091d1583e0ff19522a047b1506470de22a1cdb827d397d5e1be9647a0a79fba1a1f07e993099c789f7ff7666dc569afffe3b6f181d10ed7346dabee65e7cc046e0c5ba241b33ed41b6fe700641aa778f09b48509317bc1f3f6904098e9312cb2be4fe40645ff340992d7931eb987d6a551efe63c0c65b1a97deeef280fc809c3ef4a3a1e2598844cbeb0c657fc64adcd256e916ddbf1aa9c78b6cef645abd6692ac434febb2e4ea372f2defb8d0", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 804.071175][T24391] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 804.449960][T24404] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:57 executing program 2: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:57 executing program 4: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 804.462901][T24406] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:57 executing program 3: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="80315655d4273f9097e99c8e09caa20de662e9e5b891bfb6f3a2f2fad46fcdffc334ae9941ebc708f134bbabda93007805a3054e9c7c8bd585c6affb33edda93c8278a95b8894fdecb2b91da935091d1583e0ff19522a047b1506470de22a1cdb827d397d5e1be9647a0a79fba1a1f07e993099c789f7ff7666dc569afffe3b6f181d10ed7346dabee65e7cc046e0c5ba241b33ed41b6fe700641aa778f09b48509317bc1f3f6904098e9312cb2be4fe40645ff340992d7931eb987d6a551efe63c0c65b1a97deeef280fc809c3ef4a3a1e2598844cbeb0c657fc64adcd256e916ddbf1aa9c78b6cef645abd6692ac434febb2e4ea372f2defb8d0", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 804.984454][T24413] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:58 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:58 executing program 1: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 805.098377][T24415] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 805.350619][T24420] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 00:28:58 executing program 2: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="80315655d4273f9097e99c8e09caa20de662e9e5b891bfb6f3a2f2fad46fcdffc334ae9941ebc708f134bbabda93007805a3054e9c7c8bd585c6affb33edda93c8278a95b8894fdecb2b91da935091d1583e0ff19522a047b1506470de22a1cdb827d397d5e1be9647a0a79fba1a1f07e993099c789f7ff7666dc569afffe3b6f181d10ed7346dabee65e7cc046e0c5ba241b33ed41b6fe700641aa778f09b48509317bc1f3f6904098e9312cb2be4fe40645ff340992d7931eb987d6a551efe63c0c65b1a97deeef280fc809c3ef4a3a1e2598844cbeb0c657fc64adcd256e916ddbf1aa9c78b6cef645abd6692ac434febb2e4ea372f2defb8d0", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:58 executing program 4: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:28:58 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 00:28:59 executing program 0: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003640)=""/4110, 0x100e}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000003400)=""/128, 0x80}], 0x8}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0f00004200", @ANYRES64], 0xfe33) [ 805.533347][T24423] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 806.129102][T24440] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:28:59 executing program 1: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224d442017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88afc6002084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51f25afd5e17094b2fa40f1d696e2e6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30b090000008bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e2359c41cfb426e1230bc1cd4c02c460ceb44276e9bdae07e457b7ccc70a81949c813594d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7289de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486af8dd600000000000000000000c7766ea7c581782c0d90f42a85303835b4a841fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd028f4fd73f8c541e4620d47962b92a5449c0fa83057483a22d646f97672dd6e0d8b7b667eaa953b8f03f730c74322e23fb5866b723b0e846a3c412af4c64b16dd43dcf95612ca8c"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 806.340433][T24445] bond15: (slave bridge38): Enslaving as a backup interface with an up link 00:28:59 executing program 0: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003640)=""/4110, 0x100e}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000003400)=""/128, 0x80}], 0x8}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0f00004200", @ANYRES64], 0xfe33) [ 806.487522][T24440] bond15 (unregistering): (slave bridge38): Releasing backup interface 00:28:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ff94a6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0xd8}}, 0x0) [ 806.557610][T24440] bond15 (unregistering): Released all slaves 00:28:59 executing program 0: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003640)=""/4110, 0x100e}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000003400)=""/128, 0x80}], 0x8}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0f00004200", @ANYRES64], 0xfe33) 00:28:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ff94a6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0xd8}}, 0x0) 00:28:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:28:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ff94a6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0xd8}}, 0x0) 00:28:59 executing program 0: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003640)=""/4110, 0x100e}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/209, 0xd1}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000003400)=""/128, 0x80}], 0x8}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0f00004200", @ANYRES64], 0xfe33) [ 806.809581][T24468] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:28:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ff94a6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0xd8}}, 0x0) 00:28:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 807.004445][T24472] bond15: (slave bridge39): Enslaving as a backup interface with an up link [ 807.085961][T24482] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 807.254609][T24483] bond12: (slave bridge16): Enslaving as a backup interface with an up link [ 807.279256][T24468] bond15 (unregistering): (slave bridge39): Releasing backup interface [ 807.340319][T24468] bond15 (unregistering): Released all slaves [ 807.391222][T24482] bond12 (unregistering): (slave bridge16): Releasing backup interface [ 807.441485][T24482] bond12 (unregistering): Released all slaves 00:29:00 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 00:29:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) 00:29:00 executing program 1: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x41}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006970766c616e00001c00028014388d0069aa265dbfdaf59fbc789606000100020000000600020003000000060002000100000008000500", @ANYBLOB="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", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xb, 0xff, 0x9}, 0x10, 0x0, r3}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000300)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) close(0xffffffffffffffff) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:29:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffefc) 00:29:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:29:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:29:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffefc) [ 807.910061][T24495] __nla_validate_parse: 3 callbacks suppressed [ 807.910080][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:00 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) [ 807.954991][T24492] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:29:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffefc) [ 808.016729][T24497] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 00:29:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0xfffffffffffffefc) 00:29:01 executing program 0: r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000851) [ 808.207563][T24502] bond12: (slave bridge17): Enslaving as a backup interface with an up link [ 808.246696][T24516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 808.249409][T24506] ext4_ioctl_checkpoint: 3 callbacks suppressed 00:29:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) [ 808.249425][T24506] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 808.300760][T24492] bond15: (slave bridge40): Enslaving as a backup interface with an up link 00:29:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 00:29:01 executing program 0: r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000851) [ 808.434771][T24517] bond12 (unregistering): (slave bridge17): Releasing backup interface [ 808.461331][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.467713][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.496695][T24517] bond12 (unregistering): Released all slaves [ 808.532121][T24522] bond15 (unregistering): (slave bridge40): Releasing backup interface [ 808.559713][T24522] bond15 (unregistering): Released all slaves [ 808.617464][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:29:01 executing program 0: r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000851) 00:29:01 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) 00:29:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 00:29:01 executing program 0: r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000851) 00:29:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x6, @mcast2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) 00:29:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 00:29:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x6, @mcast2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) 00:29:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) [ 808.877442][T24541] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 00:29:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x6, @mcast2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) [ 808.978481][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:01 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 00:29:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x6, @mcast2}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) [ 809.123507][T24545] bond12: (slave bridge18): Enslaving as a backup interface with an up link [ 809.166060][T24546] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 809.294528][T24549] bond15: (slave bridge41): Enslaving as a backup interface with an up link [ 809.418921][T24564] bond15 (unregistering): (slave bridge41): Releasing backup interface [ 809.479103][T24564] bond15 (unregistering): Released all slaves [ 809.529290][T24541] bond12 (unregistering): (slave bridge18): Releasing backup interface [ 809.551789][T24541] bond12 (unregistering): Released all slaves 00:29:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:02 executing program 1: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) 00:29:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="fcd61434f5167d01a76a94e6fed04c53f38469cbb1c5ff31996ff26dae3bd968fdb39cae513d655a2bc497ca2dd85c8ab5989eb08581da320533fb88d720cac78b11005ab86ee360899faa89bf893a92155d3e083fac89425c67f157d623519c5800a5cc3c3557d46f15d58a97d0bb05e10da24b839bc2bed69173a62d2750ff32445a4bd37b93668ef1eb2227717a0d5eb4597bd63c982859934a713f9403a1634e1490bca6ced46e14a4896c6cdf207f08d8020429d79ec15df2f7aac33a017d0a64d66738469158b007f4fa03f88c53afb698065c6a151566a66613f13896db000000000000000000000000000000007fa61faf1e5a75d6f4145fbff3e95a084cebc2d5dad00302228d3c7b4118e4c934bc2ab8030dd123cf32a515ba12e5afbd7d0c7cc43edc1492888ff3068341e8b1d5da783732c1de290cfa782b4b50bc1d8c04792cc574bf9a782b0161702f769455c6237c3505aa8854704b49bb14ab8b5be78ac0235483f99338978353be97ecca5346b7e266e3b74f40316aa5a7c06f73cee67a01d170222b66d711ddb9fb9c97e7f58b84b1d2cc1b9af1cc551489dea9e1c8fdd19c124f049ea34142f7b80f1ee80772820a64a0b786eadc2ccf10659494997a30"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:02 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 00:29:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:02 executing program 1: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) 00:29:02 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) 00:29:02 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) 00:29:02 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 00:29:02 executing program 1: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) [ 809.862613][T24589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:29:02 executing program 4: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) 00:29:02 executing program 1: r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) listen(r0, 0x0) [ 809.994334][T24589] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 810.142797][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 810.142839][ T27] audit: type=1804 audit(1681518542.992:747): pid=24584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/979/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 00:29:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:03 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 00:29:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 00:29:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) 00:29:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a058) 00:29:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) [ 810.709267][T24620] : entered promiscuous mode 00:29:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) [ 810.742809][ T27] audit: type=1804 audit(1681518543.592:748): pid=24625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/824/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 00:29:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) [ 810.838393][T24633] openvswitch: : Dropping previously announced user features 00:29:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a058) 00:29:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) [ 811.001479][T24640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 811.038784][T24646] openvswitch: : Dropping previously announced user features [ 811.099145][T24640] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 811.107865][ T27] audit: type=1804 audit(1681518543.952:749): pid=24647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/980/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 811.199832][ T27] audit: type=1804 audit(1681518543.952:750): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/825/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 00:29:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 00:29:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x5, 0x0, 0x0, @u32}]}, 0x34}}, 0x0) 00:29:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a058) 00:29:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_create(0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) close(r0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x7c, 0x0, 0x10, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x7c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 00:29:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) [ 811.801974][T24654] openvswitch: : Dropping previously announced user features 00:29:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 00:29:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="fcd61434f5167d01a76a94e6fed04c53f38469cbb1c5ff31996ff26dae3bd968fdb39cae513d655a2bc497ca2dd85c8ab5989eb08581da320533fb88d720cac78b11005ab86ee360899faa89bf893a92155d3e083fac89425c67f157d623519c5800a5cc3c3557d46f15d58a97d0bb05e10da24b839bc2bed69173a62d2750ff32445a4bd37b93668ef1eb2227717a0d5eb4597bd63c982859934a713f9403a1634e1490bca6ced46e14a4896c6cdf207f08d8020429d79ec15df2f7aac33a017d0a64d66738469158b007f4fa03f88c53afb698065c6a151566a66613f13896db000000000000000000000000000000007fa61faf1e5a75d6f4145fbff3e95a084cebc2d5dad00302228d3c7b4118e4c934bc2ab8030dd123cf32a515ba12e5afbd7d0c7cc43edc1492888ff3068341e8b1d5da783732c1de290cfa782b4b50bc1d8c04792cc574bf9a782b0161702f769455c6237c3505aa8854704b49bb14ab8b5be78ac0235483f99338978353be97ecca5346b7e266e3b74f40316aa5a7c06f73cee67a01d170222b66d711ddb9fb9c97e7f58b84b1d2cc1b9af1cc551489dea9e1c8fdd19c124f049ea34142f7b80f1ee80772820a64a0b786eadc2ccf10659494997a30"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) [ 811.916169][ T27] audit: type=1804 audit(1681518544.762:751): pid=24662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/826/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 00:29:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) [ 811.981441][T24668] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:29:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a058) 00:29:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) [ 812.152007][T24668] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:29:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) [ 812.222612][ T27] audit: type=1804 audit(1681518545.072:752): pid=24660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/981/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 812.359522][ T27] audit: type=1804 audit(1681518545.172:753): pid=24670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1724603602/syzkaller.WJnY2n/1020/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 812.468883][ T27] audit: type=1804 audit(1681518545.182:754): pid=24685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/827/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 812.731478][ T27] audit: type=1804 audit(1681518545.582:755): pid=24688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1021/cgroup.controllers" dev="sda1" ino=1188 res=1 errno=0 00:29:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="fcd61434f5167d01a76a94e6fed04c53f38469cbb1c5ff31996ff26dae3bd968fdb39cae513d655a2bc497ca2dd85c8ab5989eb08581da320533fb88d720cac78b11005ab86ee360899faa89bf893a92155d3e083fac89425c67f157d623519c5800a5cc3c3557d46f15d58a97d0bb05e10da24b839bc2bed69173a62d2750ff32445a4bd37b93668ef1eb2227717a0d5eb4597bd63c982859934a713f9403a1634e1490bca6ced46e14a4896c6cdf207f08d8020429d79ec15df2f7aac33a017d0a64d66738469158b007f4fa03f88c53afb698065c6a151566a66613f13896db000000000000000000000000000000007fa61faf1e5a75d6f4145fbff3e95a084cebc2d5dad00302228d3c7b4118e4c934bc2ab8030dd123cf32a515ba12e5afbd7d0c7cc43edc1492888ff3068341e8b1d5da783732c1de290cfa782b4b50bc1d8c04792cc574bf9a782b0161702f769455c6237c3505aa8854704b49bb14ab8b5be78ac0235483f99338978353be97ecca5346b7e266e3b74f40316aa5a7c06f73cee67a01d170222b66d711ddb9fb9c97e7f58b84b1d2cc1b9af1cc551489dea9e1c8fdd19c124f049ea34142f7b80f1ee80772820a64a0b786eadc2ccf10659494997a30"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) [ 813.241038][T24704] bridge24: entered promiscuous mode 00:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 00:29:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="fcd61434f5167d01a76a94e6fed04c53f38469cbb1c5ff31996ff26dae3bd968fdb39cae513d655a2bc497ca2dd85c8ab5989eb08581da320533fb88d720cac78b11005ab86ee360899faa89bf893a92155d3e083fac89425c67f157d623519c5800a5cc3c3557d46f15d58a97d0bb05e10da24b839bc2bed69173a62d2750ff32445a4bd37b93668ef1eb2227717a0d5eb4597bd63c982859934a713f9403a1634e1490bca6ced46e14a4896c6cdf207f08d8020429d79ec15df2f7aac33a017d0a64d66738469158b007f4fa03f88c53afb698065c6a151566a66613f13896db000000000000000000000000000000007fa61faf1e5a75d6f4145fbff3e95a084cebc2d5dad00302228d3c7b4118e4c934bc2ab8030dd123cf32a515ba12e5afbd7d0c7cc43edc1492888ff3068341e8b1d5da783732c1de290cfa782b4b50bc1d8c04792cc574bf9a782b0161702f769455c6237c3505aa8854704b49bb14ab8b5be78ac0235483f99338978353be97ecca5346b7e266e3b74f40316aa5a7c06f73cee67a01d170222b66d711ddb9fb9c97e7f58b84b1d2cc1b9af1cc551489dea9e1c8fdd19c124f049ea34142f7b80f1ee80772820a64a0b786eadc2ccf10659494997a30"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) [ 813.272994][T24702] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 813.360083][ T27] audit: type=1804 audit(1681518546.212:756): pid=24710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1892445420/syzkaller.olj5Jj/965/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 813.369885][T24702] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 813.429836][T24712] bridge25: entered promiscuous mode 00:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) [ 813.598280][T24716] bridge26: entered promiscuous mode 00:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x2e, 0xffffffffffffffff}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1f}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) [ 813.792817][T24723] bridge27: entered promiscuous mode 00:29:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25050000001800058008000100756470000c00028008000300ffffff7f240004800c000780080003004a0b00001300010062726f6164636173742d6c696e6b0000300001802c0004001400010002004e206401010000000000000000001400020002004e2000000000000000000000000024010180080003000100000044000400200001000a004e2200000020fe8000000000000000000000000000aa00000000200002000a004e2000000800ff01000000000000000000000000000109000000380004001400010002004e24ac1e01010000000000000000200002000a004e2100000058fe880000000000000000000000000001ff070000380004001400010002004e20640101010000000000000000200002000a004e2200000008ff0100000000000000000000000000010200000044000400200001000a004e220000000900000000000000000000000000000000ff0f0000200002000a004e240000000120010000000000000000000000000002008000000d0001007564703a73797a32000d0001007564703a73797a3200000000640001800d0001007564703a73797a31000000002c0004001400010002004e210a01010000000000000000001400020002004e217f000001000000000000000024000280080002000200000008000300000e00000800030004000000080002000500000000000075f9b76cfa7d43aba6f2f9cc9d276e2e5867d44e19d9f8affbf9aa786e03b07b2b85be07432755d5db06723bc8926ba4073cb13aea11319c1bdc590d19abd546d4"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="f4", &(0x7f0000000400)=""/231}, 0x20) 00:29:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="f4", &(0x7f0000000400)=""/231}, 0x20) 00:29:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x2, 0x3}, 0x10}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, r6, 0xf07ec000) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', 0x0}) sendfile(r4, r5, 0x0, 0xf03b0037) sendfile(r4, r3, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 814.355806][T24731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:29:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25050000001800058008000100756470000c00028008000300ffffff7f240004800c000780080003004a0b00001300010062726f6164636173742d6c696e6b0000300001802c0004001400010002004e206401010000000000000000001400020002004e2000000000000000000000000024010180080003000100000044000400200001000a004e2200000020fe8000000000000000000000000000aa00000000200002000a004e2000000800ff01000000000000000000000000000109000000380004001400010002004e24ac1e01010000000000000000200002000a004e2100000058fe880000000000000000000000000001ff070000380004001400010002004e20640101010000000000000000200002000a004e2200000008ff0100000000000000000000000000010200000044000400200001000a004e220000000900000000000000000000000000000000ff0f0000200002000a004e240000000120010000000000000000000000000002008000000d0001007564703a73797a32000d0001007564703a73797a3200000000640001800d0001007564703a73797a31000000002c0004001400010002004e210a01010000000000000000001400020002004e217f000001000000000000000024000280080002000200000008000300000e00000800030004000000080002000500000000000075f9b76cfa7d43aba6f2f9cc9d276e2e5867d44e19d9f8affbf9aa786e03b07b2b85be07432755d5db06723bc8926ba4073cb13aea11319c1bdc590d19abd546d4"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="f4", &(0x7f0000000400)=""/231}, 0x20) [ 814.440486][T24731] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:29:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="f4", &(0x7f0000000400)=""/231}, 0x20) 00:29:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:07 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 00:29:07 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 00:29:07 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) [ 815.166100][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 815.166117][ T27] audit: type=1804 audit(1681518548.012:763): pid=24748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/829/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 [ 815.301404][ T27] audit: type=1804 audit(1681518548.152:764): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1023/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 00:29:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:08 executing program 0: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 00:29:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x2, 0x3}, 0x10}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, r6, 0xf07ec000) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', 0x0}) sendfile(r4, r5, 0x0, 0xf03b0037) sendfile(r4, r3, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 00:29:08 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xf) 00:29:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x208e24b) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)) mmap(&(0x7f0000629000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x4, 0x2c, [0x4, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffb], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/44}, &(0x7f00000003c0)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x40800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000001100)=ANY=[@ANYBLOB="20bb56002d521295b2b86764b4445d2b6b0431f8edc7ba27986e2cf8b024bff227ed9c5b2bd35d29b3e4a3a9c92c7a8bf41be7bef64a8b55378941386018bb399ae622b65295212dd4b1e42c9344b80be33d7414adaae2df7dd5c6af12f757180bc952c2a8be1e5a811b314437c56c810aebc10272cccfb576e43a27fb3177c7408b7b46f01592f2f6b4b0de20e4c80c9936cc0dbea64686d659b9045a2f8530ba8a557d0ebb345dbf98f3befc9797b9f33ac6383ae0ed0d3794a5caffee45398bb377ff", @ANYRES16=r3, @ANYBLOB="000403c8efcc2abd7000fddbdf252e00000000009900687a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x4014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000f367b28198365744000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a100060000000800a10008e80000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000001740)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000079000000fc13dbaf6536634b000000000c0058000a00040000004ae40000580026000000000000000c0058004a000000000007000c00580013000000000020000c00580056000000000000000c0058005700000000000000cb6fcf2485876940f0bdfb06818c73f956819ab8214e48e9e99e5d570daaf8e81778568746"], 0x7c}}, 0x40048094) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f0000000140)) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x208e24b) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r8 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000012c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25050000001800058008000100756470000c00028008000300ffffff7f240004800c000780080003004a0b00001300010062726f6164636173742d6c696e6b0000300001802c0004001400010002004e206401010000000000000000001400020002004e2000000000000000000000000024010180080003000100000044000400200001000a004e2200000020fe8000000000000000000000000000aa00000000200002000a004e2000000800ff01000000000000000000000000000109000000380004001400010002004e24ac1e01010000000000000000200002000a004e2100000058fe880000000000000000000000000001ff070000380004001400010002004e20640101010000000000000000200002000a004e2200000008ff0100000000000000000000000000010200000044000400200001000a004e220000000900000000000000000000000000000000ff0f0000200002000a004e240000000120010000000000000000000000000002008000000d0001007564703a73797a32000d0001007564703a73797a3200000000640001800d0001007564703a73797a31000000002c0004001400010002004e210a01010000000000000000001400020002004e217f000001000000000000000024000280080002000200000008000300000e00000800030004000000080002000500000000000075f9b76cfa7d43aba6f2f9cc9d276e2e5867d44e19d9f8affbf9aa786e03b07b2b85be07432755d5db06723bc8926ba4073cb13aea11319c1bdc590d19abd546d4"], 0x208}, 0x1, 0x0, 0x0, 0x8094}, 0x20000001) r9 = accept$alg(r5, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x0, 0x0) sendfile(r9, r4, 0x0, 0x10000a006) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20048000) 00:29:08 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xf) 00:29:08 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xf) [ 815.745055][T24783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 815.822660][T24783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:29:08 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0xf) 00:29:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 815.911431][ T27] audit: type=1804 audit(1681518548.752:765): pid=24787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1892445420/syzkaller.olj5Jj/967/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 00:29:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) 00:29:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) [ 816.105365][T24797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 816.259846][ T27] audit: type=1804 audit(1681518549.112:766): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/830/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 00:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:29:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) 00:29:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x2, 0x3}, 0x10}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, r6, 0xf07ec000) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', 0x0}) sendfile(r4, r5, 0x0, 0xf03b0037) sendfile(r4, r3, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 00:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 816.558361][T24807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) [ 816.681777][T24813] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) 00:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:29:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:29:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x37555ef71f836bbe, 0x4) [ 816.891251][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x37555ef71f836bbe, 0x4) [ 817.007948][T24831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x37555ef71f836bbe, 0x4) 00:29:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 00:29:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@delchain={0x34, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2, 0xffff}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) [ 817.208149][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 817.325020][T24848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xb, 0x2, 0x3}, 0x10}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x4010, r6, 0xf07ec000) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', 0x0}) sendfile(r4, r5, 0x0, 0xf03b0037) sendfile(r4, r3, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 00:29:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x37555ef71f836bbe, 0x4) 00:29:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) 00:29:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x219}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/208, 0xd0}], 0x1, &(0x7f0000000200)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000002980)={0x77359400}) [ 817.689952][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:10 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/3076], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:29:10 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ff0000ffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000010000e8b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c8ff19273d16b72eb83ec5a3c87bb07eb78c27b061773f04a2082ba8cedf8510e63fb112cf6956e09d19380f6ae30b947aa4d849cee051e88bdbf764b6f6111613d47dd52f50994f5ba9450d8d8ba7dc552360993fcf5b0000005cf3c395c39f34995327831b5e9b83d455dd145158ee21ed5092057e6344c7cf9708b0d3dc5fc3b532e1ee8c1aac32a306d6a37463d3b62def01845f99016a0689986566e1be81f800557a49d0ff70cace985c486fd0f9ed4bd0fb4964e00c00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:10 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) [ 817.980458][T24876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:10 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/3076], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 818.083159][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) 00:29:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/3076], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) 00:29:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ff0000ffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000010000e8b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c8ff19273d16b72eb83ec5a3c87bb07eb78c27b061773f04a2082ba8cedf8510e63fb112cf6956e09d19380f6ae30b947aa4d849cee051e88bdbf764b6f6111613d47dd52f50994f5ba9450d8d8ba7dc552360993fcf5b0000005cf3c395c39f34995327831b5e9b83d455dd145158ee21ed5092057e6344c7cf9708b0d3dc5fc3b532e1ee8c1aac32a306d6a37463d3b62def01845f99016a0689986566e1be81f800557a49d0ff70cace985c486fd0f9ed4bd0fb4964e00c00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:11 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x2e) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x34, 0x0, 0x0, 0xa00000, 0x0, 0x2600}) 00:29:11 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) 00:29:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/3076], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:29:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:12 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getnexthop={0x18}, 0x18}}, 0x0) r3 = accept4(r1, &(0x7f0000000200)=@caif=@dgm, &(0x7f0000000080)=0x80, 0x81800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x5d0, 0x1, @remote, @mcast1, 0x7, 0x8000, 0xc38d, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r8, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r7}, 0x80) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0ff0000ffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000010000e8b7050000220000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c8ff19273d16b72eb83ec5a3c87bb07eb78c27b061773f04a2082ba8cedf8510e63fb112cf6956e09d19380f6ae30b947aa4d849cee051e88bdbf764b6f6111613d47dd52f50994f5ba9450d8d8ba7dc552360993fcf5b0000005cf3c395c39f34995327831b5e9b83d455dd145158ee21ed5092057e6344c7cf9708b0d3dc5fc3b532e1ee8c1aac32a306d6a37463d3b62def01845f99016a0689986566e1be81f800557a49d0ff70cace985c486fd0f9ed4bd0fb4964e00c00000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0xfffffffe, 0xf, 0x0, &(0x7f0000000480)="a663a474992675f40cb3edcb26817f", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000002c0)='iocost_ioc_vrate_adj\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r10, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10001}, [@jmp, @ldst={0x0, 0x2, 0x6, 0x5, 0x4, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x40}, @generic={0x9, 0x6, 0x9, 0x401, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x30, &(0x7f0000000280)=""/48, 0x41100, 0xa, '\x00', r12, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x6, 0x833}, 0x10, 0x0, r11}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@RTM_DELMDB={0xd8, 0x55, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@rand_addr=' \x01\x00'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x0, 0x0, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000044}, 0x20008041) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) 00:29:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) 00:29:12 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_misc(r3, 0x0, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2e, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x8, 0xffff}}}, 0x24}}, 0x0) [ 819.672759][T24938] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 00:29:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e6326996a3cfee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd0d69613d3cd62f00158e6eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7d3bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff412a9b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc423df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68c98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f1e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a6712050000003b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f41ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ee92134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d607ffffff7fffffffff554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6db51b560457300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d5b2e895fc96ca86cdb5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d7990695810200000000acd30000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cd3ace2c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d729d3979676bffb3049166ab84a0f061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a040000000000000092cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b000"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xd}, @val, @llc={@snap={0x0, 0x0, 't', "06d647"}}}, 0xfdef) 00:29:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e6326996a3cfee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd0d69613d3cd62f00158e6eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7d3bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff412a9b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc423df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68c98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f1e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a6712050000003b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f41ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ee92134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d607ffffff7fffffffff554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6db51b560457300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d5b2e895fc96ca86cdb5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d7990695810200000000acd30000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cd3ace2c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d729d3979676bffb3049166ab84a0f061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a040000000000000092cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b000"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:13 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xc00, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:29:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xfc, 0x0, 0x0, 0x0, "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", 0x0, "6cc16950b044f37857cf15ba4abe27aac7703e85"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b06e002ecf0b6d23"}, 0x1}}]}, 0x14c}}, 0x0) 00:29:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26532bdcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c2683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000012c0), 0x4) 00:29:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xfc, 0x0, 0x0, 0x0, "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", 0x0, "6cc16950b044f37857cf15ba4abe27aac7703e85"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b06e002ecf0b6d23"}, 0x1}}]}, 0x14c}}, 0x0) 00:29:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xc00, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:29:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26532bdcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c2683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000012c0), 0x4) 00:29:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xfc, 0x0, 0x0, 0x0, "3c49f88b6b2b3c6b30092dba16701bcd1d25318070b406d94e0d9dcf33d52bfced9ea59e3e2f20f57012fdef9ad8366c36e78c1746242f1abab746dd014d3ec5876eacccb21a99b9c9f7d8d45ae98735707743d3c68942093fc76d9f30f9b31e78b44c503cc4d8916ab36e6ab971570640f7032a545b8fe421a2475633bc7f37c22f2220f59f2afb89698ce8d84cdc87d8da87596d5e6b595229ec4f9c667503214a0099eab01590a181d7a38b766a48037a0e6e461fc78b9fca8e22b8fed9380d9d87a466f1d65fd63810f4f0c1119b4b8bd986389f4c46d748046fbde58af5f1beb956d0558ebe74363ff4003305beed3e166a0b209a2f8ebf9245a47886cb", 0x0, "6cc16950b044f37857cf15ba4abe27aac7703e85"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b06e002ecf0b6d23"}, 0x1}}]}, 0x14c}}, 0x0) [ 821.211527][ T27] audit: type=1804 audit(1681518554.062:767): pid=24988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/994/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 00:29:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xc00, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:29:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xfc, 0x0, 0x0, 0x0, "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", 0x0, "6cc16950b044f37857cf15ba4abe27aac7703e85"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b06e002ecf0b6d23"}, 0x1}}]}, 0x14c}}, 0x0) 00:29:14 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xd}, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x3b}, 0x4, 0x4, @broadcast, 0x9, 0x5, 0x100}}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x18, 0x4}}, @measure_req={0x26, 0x22, {0x7, 0xfb, 0x6, "ef7a970cd81b3ae331d6fc199c0a98bcdcec74ebe8298d8503376614797160"}}, @challenge={0x10, 0x1, 0x6e}, @mesh_chsw={0x76, 0x6, {0xff, 0x4, 0x31, 0x1ff8}}, @random={0x9, 0x7, "e8a5d512a3937c"}, @ssid={0x0, 0xa, @random="cabd014727119abbb6bf"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x1}}, @challenge={0x10, 0x1, 0x88}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'pim6reg0\x00', {0x7}, 0x7}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fedc68ca00e36f13e60000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1bf8ad2774"], 0x20000600}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1680], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000680)=0x68) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}]}, 0x3c}}, 0x0) 00:29:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:14 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26532bdcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c2683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000012c0), 0x4) 00:29:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x9025}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0xc00, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x85}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:29:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26532bdcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c2683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000012c0), 0x4) 00:29:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0xa, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 00:29:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:15 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$rds(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) 00:29:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0xa, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 822.130721][ T27] audit: type=1804 audit(1681518554.982:768): pid=25023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/995/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 822.215565][T25029] __nla_validate_parse: 11 callbacks suppressed [ 822.215586][T25029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0xa, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) [ 822.246792][ T27] audit: type=1804 audit(1681518555.042:769): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/841/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 00:29:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x5, 0x0, 0xa, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 00:29:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:15 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 822.885112][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 822.970965][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 822.973456][T25053] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:15 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 823.014027][T25053] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.062054][ T27] audit: type=1804 audit(1681518555.912:770): pid=25047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/842/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 823.072150][T25059] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.101624][T25051] bridge19: entered promiscuous mode [ 823.107147][T25051] bridge19: entered allmulticast mode [ 823.155711][ T27] audit: type=1804 audit(1681518555.962:771): pid=25043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/996/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 823.160060][T25059] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) 00:29:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) 00:29:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) [ 823.308451][T25063] bridge19: entered promiscuous mode [ 823.330889][T25063] bridge19: entered allmulticast mode 00:29:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_da_write_pages\x00', r0}, 0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001500197f09004b0101048c5901", 0x11}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) [ 823.424979][T25073] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 823.470916][T25073] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 00:29:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 823.574236][ T27] audit: type=1804 audit(1681518556.422:772): pid=25074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/997/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 823.609160][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 823.686397][ T27] audit: type=1804 audit(1681518556.532:773): pid=25078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/843/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 00:29:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x48, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private2}]}}]}, 0x48}}, 0x0) 00:29:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) 00:29:16 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:16 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r1 = socket(0x10, 0x800000000000002, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) close(r0) [ 823.942024][T25096] bridge22: entered promiscuous mode [ 823.947393][T25096] bridge22: entered allmulticast mode 00:29:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 00:29:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "4cb12e98e78fe5ee05ba49d2609cc76e24cd64fcc1"}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 00:29:16 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "4cb12e98e78fe5ee05ba49d2609cc76e24cd64fcc1"}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) [ 824.081208][T25098] bridge19: entered promiscuous mode 00:29:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "4cb12e98e78fe5ee05ba49d2609cc76e24cd64fcc1"}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) [ 824.116718][T25098] bridge19: entered allmulticast mode 00:29:17 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "4cb12e98e78fe5ee05ba49d2609cc76e24cd64fcc1"}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r4, 0x0, 0x2000000000a, 0x0) 00:29:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:17 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) [ 824.309776][T25118] bridge22: entered promiscuous mode 00:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66e99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SEQ_NR={0x6}]}}}]}, 0x48}}, 0x0) [ 824.452655][T25118] bridge22: entered allmulticast mode [ 824.472129][ T27] audit: type=1804 audit(1681518557.322:774): pid=25135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3698032000/syzkaller.F8TJle/1045/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 824.529952][T25135] xt_policy: output policy not valid in PREROUTING and INPUT [ 824.595087][ T27] audit: type=1804 audit(1681518557.392:775): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1046/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 824.639415][T25117] bridge19: entered promiscuous mode [ 824.659575][T25117] bridge19: entered allmulticast mode [ 824.765487][T25137] syz_tun: entered promiscuous mode [ 824.776452][T25137] batadv_slave_0: entered promiscuous mode [ 824.802520][T25137] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 824.819080][T25137] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 824.830632][T25137] hsr1: entered allmulticast mode 00:29:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:17 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) 00:29:17 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 00:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66e99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SEQ_NR={0x6}]}}}]}, 0x48}}, 0x0) [ 824.992879][T25151] bridge19: entered promiscuous mode [ 824.999932][T25151] bridge19: entered allmulticast mode 00:29:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66e99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SEQ_NR={0x6}]}}}]}, 0x48}}, 0x0) [ 825.094233][ T27] audit: type=1804 audit(1681518557.942:776): pid=25156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3698032000/syzkaller.F8TJle/1046/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 00:29:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) [ 825.187352][T25153] bridge22: entered promiscuous mode [ 825.208783][T25153] bridge22: entered allmulticast mode [ 825.223489][T25143] xt_policy: output policy not valid in PREROUTING and INPUT 00:29:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x66e99}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SEQ_NR={0x6}]}}}]}, 0x48}}, 0x0) 00:29:18 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) [ 825.470088][T25166] bridge19: entered promiscuous mode [ 825.551225][T25166] bridge19: entered allmulticast mode [ 825.680057][T25169] bridge22: entered promiscuous mode [ 825.692487][T25169] bridge22: entered allmulticast mode 00:29:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) [ 825.936006][T25193] bridge22: entered promiscuous mode 00:29:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x41) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @loopback}, 0x28c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='rose0\x00', 0x1, 0x88, 0x2}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) socket$inet(0x2, 0x800, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42040040}, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x270, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff65}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x715}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x212c1db5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17cf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3e3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf131}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8011}, 0x20004000) ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000000)) 00:29:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) [ 825.957656][T25193] bridge22: entered allmulticast mode 00:29:18 executing program 4: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) [ 826.097742][T25191] xt_policy: output policy not valid in PREROUTING and INPUT [ 826.157825][T25198] bridge19: entered promiscuous mode [ 826.187221][T25198] bridge19: entered allmulticast mode [ 826.231691][T25204] xt_policy: output policy not valid in PREROUTING and INPUT [ 826.250055][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 826.250072][ T27] audit: type=1804 audit(1681518559.102:781): pid=25203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1049/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 826.400154][T25195] bridge22: entered promiscuous mode [ 826.408801][T25195] bridge22: entered allmulticast mode [ 826.537543][T25217] bridge19: entered promiscuous mode [ 826.556509][T25217] bridge19: entered allmulticast mode 00:29:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:19 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) [ 826.872209][ T27] audit: type=1804 audit(1681518559.722:782): pid=25229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1050/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 [ 826.905625][T25228] xt_policy: output policy not valid in PREROUTING and INPUT 00:29:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000400)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) [ 826.993473][ T27] audit: type=1804 audit(1681518559.752:783): pid=25228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3698032000/syzkaller.F8TJle/1048/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 [ 827.034591][T25226] xt_policy: output policy not valid in PREROUTING and INPUT [ 827.071497][ T27] audit: type=1804 audit(1681518559.912:784): pid=25239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/1001/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 00:29:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000400)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) [ 827.143893][T25233] xt_policy: output policy not valid in PREROUTING and INPUT [ 827.162921][ T27] audit: type=1804 audit(1681518559.952:785): pid=25233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/848/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 00:29:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000400)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 00:29:20 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) [ 827.220395][ T27] audit: type=1804 audit(1681518560.072:786): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1892445420/syzkaller.olj5Jj/1004/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 [ 827.254132][T25240] xt_policy: output policy not valid in PREROUTING and INPUT 00:29:20 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000400)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 00:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x60}]}}}]}, 0x38}}, 0x0) 00:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x60}]}}}]}, 0x38}}, 0x0) [ 827.473367][ T27] audit: type=1804 audit(1681518560.322:787): pid=25250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/1002/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 00:29:20 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x60}]}}}]}, 0x38}}, 0x0) 00:29:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x60}]}}}]}, 0x38}}, 0x0) 00:29:20 executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="9f2f01691348"}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0xe) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r6, 0x0, 0x100000ea4) 00:29:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) 00:29:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) [ 828.011816][ T27] audit: type=1804 audit(1681518560.862:788): pid=25276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2466967797/syzkaller.NBVGHy/1051/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 828.060965][T25276] xt_policy: output policy not valid in PREROUTING and INPUT 00:29:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) [ 828.118619][ T27] audit: type=1804 audit(1681518560.892:789): pid=25270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2818633467/syzkaller.pVgOGR/1003/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 828.137073][T25277] xt_policy: output policy not valid in PREROUTING and INPUT 00:29:21 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) 00:29:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) 00:29:21 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 828.212086][ T27] audit: type=1804 audit(1681518560.902:790): pid=25278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1317592935/syzkaller.jMLotw/849/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 00:29:21 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:29:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) 00:29:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6baeae0bd7fe68ca00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9"], 0x20000600}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'wlan1\x00', {0x1}, 0xabc}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x18c, 0x203, 0xc8, 0x11000000, 0x358, 0x2e0, 0x2e0, 0x358, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0xffffff00, 0xffffffff], [], 'veth0_to_bridge\x00', 'veth0_to_team\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@private, [], @ipv6=@mcast1, [], 0x4d6, 0x3504, 0x21, 0x0, 0xf, 0x7}, {@ipv4=@multicast1, [0x7f, 0xff], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xffffffff, 0xff]}, {@ipv4=@private, [0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0x0, 0x0, 0xffffffff, 0xff000000]}, {@ipv4=@local, [0x1ff000001], @ipv4=@rand_addr=0x64010101, [0x0, 0x0, 0xff000000, 0xffffff00]}], 0x2}}, @common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x2) listen(r2, 0x4) sendmsg$GTP_CMD_GETPDP(r5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r8 = accept$alg(r4, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)}, 0x40}], 0x2, 0x0, 0x0) sendfile(r8, r1, 0x0, 0x2000010000a006) sendmsg$alg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8801) 00:29:21 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:29:22 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:29:22 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:29:22 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:29:22 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, &(0x7f0000000080), 0x4) 00:29:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xeef8e000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0xde}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6aa, 0x0) socket(0x15, 0x80000, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001700)=0x200, 0x4) 00:29:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 00:29:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 00:29:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 00:29:22 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:29:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 00:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0x0, 0x1a0, 0x340, 0x270, 0xd0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @empty, [], [], 'vxcan1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'dummy0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'nr0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:29:23 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 830.288466][T25341] __nla_validate_parse: 11 callbacks suppressed [ 830.288485][T25341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:23 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:29:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0x0, 0x1a0, 0x340, 0x270, 0xd0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @empty, [], [], 'vxcan1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'dummy0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'nr0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 830.494609][T25353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xeef8e000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0xde}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6aa, 0x0) socket(0x15, 0x80000, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001700)=0x200, 0x4) 00:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0x0, 0x1a0, 0x340, 0x270, 0xd0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @empty, [], [], 'vxcan1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'dummy0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'nr0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 00:29:23 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000035c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 00:29:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0x0, 0x1a0, 0x340, 0x270, 0xd0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @empty, [], [], 'vxcan1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'dummy0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@loopback, @remote, [], [], 'nr0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) [ 830.860327][T25359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 831.050645][T25369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.189738][T25373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:24 executing program 1: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a31ad0868b7f353e715d4856cbf4247d8abd6a69700fc95f2cf63c5ed98606cdfe08ffdd97d42ecbd3846b9811dbcd5b3916d3c021b7b1263cf9f650748e0096c77356fd0a093101ad947dc5c7e22e5814d682dad254e68f3e1dea54425299e9ab51e7efac64fe89b9e26afe59a5c9590b43a6b4a358d3337f845a55a8882913869c0773139f254ec021de2f62c71e3812d010747ecf8157888ac0bc57255c21f522d3093975d0bc1a9597c69db8607d179e8bf21c8ed8bb5fbb5fa5a2c29c75a582e12c43f52da8e22f94804eed484d0c44a9e10ad16cffd3c299125af4e348abd6806b2e9521e12dca50edb6c53f8dfa3ec17775b948dec7e52c14ee66345bbb15ad49e23d07a2c05ce18127ca815cfbda7d239d8ccde2dd9f2c6fdc51b8fecbaedee47047072050394abe067fbbf70901cc0148bcf38d164156d7333a038f4c2c3bfe9ee5fb5b3f121810389bc13d9365c193c8f95fd08564ac63d51dfbb3c845ace65b687a6201508b4000000"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x205, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:29:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:24 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 831.424503][T25381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.567829][T25384] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:29:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xeef8e000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0xde}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6aa, 0x0) socket(0x15, 0x80000, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001700)=0x200, 0x4) 00:29:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x205, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:29:24 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 00:29:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100015477042959d462d330fc8b08f72", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x205, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:29:24 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) [ 832.077131][T25403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:25 executing program 1: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x205, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:29:25 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 00:29:25 executing program 3: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:25 executing program 4: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 832.422905][T25416] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 832.473837][T25425] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 832.527994][T25426] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:29:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0xeef8e000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0xde}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6aa, 0x0) socket(0x15, 0x80000, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) pipe(0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000001700)=0x200, 0x4) 00:29:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:26 executing program 3: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:26 executing program 4: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 833.531435][T25447] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 833.554103][T25449] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:29:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:29 executing program 1: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a31ad0868b7f353e715d4856cbf4247d8abd6a69700fc95f2cf63c5ed98606cdfe08ffdd97d42ecbd3846b9811dbcd5b3916d3c021b7b1263cf9f650748e0096c77356fd0a093101ad947dc5c7e22e5814d682dad254e68f3e1dea54425299e9ab51e7efac64fe89b9e26afe59a5c9590b43a6b4a358d3337f845a55a8882913869c0773139f254ec021de2f62c71e3812d010747ecf8157888ac0bc57255c21f522d3093975d0bc1a9597c69db8607d179e8bf21c8ed8bb5fbb5fa5a2c29c75a582e12c43f52da8e22f94804eed484d0c44a9e10ad16cffd3c299125af4e348abd6806b2e9521e12dca50edb6c53f8dfa3ec17775b948dec7e52c14ee66345bbb15ad49e23d07a2c05ce18127ca815cfbda7d239d8ccde2dd9f2c6fdc51b8fecbaedee47047072050394abe067fbbf70901cc0148bcf38d164156d7333a038f4c2c3bfe9ee5fb5b3f121810389bc13d9365c193c8f95fd08564ac63d51dfbb3c845ace65b687a6201508b4000000"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) [ 836.602002][T25488] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:29:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:29 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:30 executing program 3: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) [ 837.876563][T25515] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:29:30 executing program 4: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a31ad0868b7f353e715d4856cbf4247d8abd6a69700fc95f2cf63c5ed98606cdfe08ffdd97d42ecbd3846b9811dbcd5b3916d3c021b7b1263cf9f650748e0096c77356fd0a093101ad947dc5c7e22e5814d682dad254e68f3e1dea54425299e9ab51e7efac64fe89b9e26afe59a5c9590b43a6b4a358d3337f845a55a8882913869c0773139f254ec021de2f62c71e3812d010747ecf8157888ac0bc57255c21f522d3093975d0bc1a9597c69db8607d179e8bf21c8ed8bb5fbb5fa5a2c29c75a582e12c43f52da8e22f94804eed484d0c44a9e10ad16cffd3c299125af4e348abd6806b2e9521e12dca50edb6c53f8dfa3ec17775b948dec7e52c14ee66345bbb15ad49e23d07a2c05ce18127ca815cfbda7d239d8ccde2dd9f2c6fdc51b8fecbaedee47047072050394abe067fbbf70901cc0148bcf38d164156d7333a038f4c2c3bfe9ee5fb5b3f121810389bc13d9365c193c8f95fd08564ac63d51dfbb3c845ace65b687a6201508b4000000"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) [ 838.245652][T25527] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:29:32 executing program 1: unshare(0x6c060000) unshare(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback, 0xfffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, &(0x7f0000261f44)=""/183, &(0x7f00000000c0)=0xde) sendto$inet6(r5, &(0x7f0000000240)="7d2ab2aa9c7978bd2ff058b2e49d29c4fb3ccce7c49377db24acc0c6b0c7f38b61ae7d40698b0873e878d6dc4138a9af9a6ead3578555dcc1e7ca656a2b40c7388769d25b68fd9fca1499418e9c7afa7ef10669c3b0d2f345d0b1111762a8e54de936a95f59492515683ef6e3ea024b982baea491c331ebc4ae576d752f7000b569b40c80823a217f40629e146e45ba59eb788a70ad09fc1f2413dccc4148c", 0x9f, 0x40081, &(0x7f0000000100)={0xa, 0x4e20, 0x80000000, @mcast1, 0xef}, 0x1c) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc) write$binfmt_misc(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="73797a31ad0868b7f353e715d4856cbf4247d8abd6a69700fc95f2cf63c5ed98606cdfe08ffdd97d42ecbd3846b9811dbcd5b3916d3c021b7b1263cf9f650748e0096c77356fd0a093101ad947dc5c7e22e5814d682dad254e68f3e1dea54425299e9ab51e7efac64fe89b9e26afe59a5c9590b43a6b4a358d3337f845a55a8882913869c0773139f254ec021de2f62c71e3812d010747ecf8157888ac0bc57255c21f522d3093975d0bc1a9597c69db8607d179e8bf21c8ed8bb5fbb5fa5a2c29c75a582e12c43f52da8e22f94804eed484d0c44a9e10ad16cffd3c299125af4e348abd6806b2e9521e12dca50edb6c53f8dfa3ec17775b948dec7e52c14ee66345bbb15ad49e23d07a2c05ce18127ca815cfbda7d239d8ccde2dd9f2c6fdc51b8fecbaedee47047072050394abe067fbbf70901cc0148bcf38d164156d7333a038f4c2c3bfe9ee5fb5b3f121810389bc13d9365c193c8f95fd08564ac63d51dfbb3c845ace65b687a6201508b4000000"], 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f0000000040)={r6}) recvfrom$l2tp6(r6, &(0x7f0000000300)=""/224, 0xe0, 0x20, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x20) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) 00:29:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4a0}], 0x400039f, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000100), 0x81000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000300000000000000000000004000000ffffffff2500feff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000300000000000020000000004000000ffffffff2500feff0000000095000000000001003a2af4ba71af6ea018c2905c4a53c573dbcb92a3c4d17b13bdea1ba1cab968f22c1f469af0dec1131e52e361fae6d74a6526121993919168a5668509eea40d3a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x40000000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000800)={{}, r7, 0x12, @inherit={0x48, &(0x7f00000000c0)=ANY=[]}, @subvolid}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={0xffffffffffffffff, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/134, 0x86, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="850000002f000000186600000c00000000000000ffffff7f182800", @ANYRES32, @ANYBLOB="00000000460c0000183b00000500000000b70000004fedc251a3f14e152706fdf4cb0bc6c7703ec6884055fb037219425c1faf88382555aaa9da897f104c99ded2c00ad9c3ded4f71cdbdbc44800260d9acd622629073530fad4a315e224461f7982f2356613bff6fed48ae7c348257af2dd1a9828c07e5c7be9b9ba16a6f4c1685e3f76178525ec"], &(0x7f0000000400)='syzkaller\x00', 0x403, 0xff, &(0x7f0000000440)=""/255, 0x41000, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x1, 0x7fff}, 0x10, r8, r9, 0x0, &(0x7f0000001700)=[r10]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x401}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @exit, @generic={0x1, 0x3, 0x9, 0x7, 0x2}, @alu={0x7, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xd8, &(0x7f0000000380)=""/216, 0x40f00, 0x28, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x4000000, 0x7}, 0x10, 0x0, r10}, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000025c0)=r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mmc_request_start\x00'}, 0x10) 00:29:32 executing program 5: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@broadcast}, {@private}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 00:29:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89e8, 0x0) 00:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 00:29:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89e8, 0x0) 00:29:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 00:29:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89e8, 0x0) [ 840.057182][T25550] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:29:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 00:29:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89e8, 0x0) 00:29:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 00:29:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:29:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:29:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:29:35 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:29:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:35 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x5a2e}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:29:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 00:29:36 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="80a057314437702db5ef78883ee8a16915efe92fb7ad4443ad0b50feaba3fcf051a44eb07b348f4e81577abf319ed40e3a2bf19972af70d751789c7963cc3e234dc85238214e8b9c16ba924289f35482186c955d3cdeb58e3f00414b5f47bd0465ecfe98e3943bcadaca8830142ecaf78a8c8ef3958f1c67efdb1c5add6722a282114be81b3abcd1f547264478f2eb1bbd55e6cf582eaded34c3afdf020000005dc3aa1c81a65ecbe4c047c6bfc9f87dfd652b2b9eeeafd852ace7bcbe5c23cc5d522dbab8a4e3b8860cf829d4ca3372530dd0e392a2bab030b51410c3326b83e4a2a234df9e5f0ab1eb93ba8a8a318aa84423ab000000000000000000", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xa000004, r2, 0x7d, 0x0, 0x0, 0x3000000}) 00:29:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 00:29:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) [ 844.184303][T25646] tun4: tun_chr_ioctl cmd 2147767519 00:29:37 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) 00:29:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 00:29:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) [ 844.520483][T25659] tun3: tun_chr_ioctl cmd 2147767519 [ 844.535293][T25663] tun4: tun_chr_ioctl cmd 2147767519 00:29:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) 00:29:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 00:29:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) [ 844.740536][T25676] tun3: tun_chr_ioctl cmd 2147767519 [ 844.787115][T25681] tun4: tun_chr_ioctl cmd 2147767519 00:29:37 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) 00:29:37 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="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", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) 00:29:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 00:29:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x8) 00:29:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETNOCSUM(r0, 0x800454df, 0x0) [ 844.906674][T25690] tun3: tun_chr_ioctl cmd 2147767519 00:29:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'SEG6\x00'}]}, 0x20}}, 0x0) [ 844.989931][T25693] tun4: tun_chr_ioctl cmd 2147767519 00:29:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000540), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000100)=""/118}, 0x20) 00:29:37 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='initcall_level\x00', r0}, 0x10) 00:29:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000540), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000100)=""/118}, 0x20) 00:29:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:38 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="80a057314437702db5ef78883ee8a16915efe92fb7ad4443ad0b50feaba3fcf051a44eb07b348f4e81577abf319ed40e3a2bf19972af70d751789c7963cc3e234dc85238214e8b9c16ba924289f35482186c955d3cdeb58e3f00414b5f47bd0465ecfe98e3943bcadaca8830142ecaf78a8c8ef3958f1c67efdb1c5add6722a282114be81b3abcd1f547264478f2eb1bbd55e6cf582eaded34c3afdf020000005dc3aa1c81a65ecbe4c047c6bfc9f87dfd652b2b9eeeafd852ace7bcbe5c23cc5d522dbab8a4e3b8860cf829d4ca3372530dd0e392a2bab030b51410c3326b83e4a2a234df9e5f0ab1eb93ba8a8a318aa84423ab000000000000000000", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x13, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000001700), 0xffffff1f, r0}, 0x38) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:29:38 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000dc872, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f00000011c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000000)="5c417fd6ad848d0f02ca18b9c13307cb1cac29e1313c6111ec3f3c", 0x1b}, {&(0x7f0000001480)="80a057314437702db5ef78883ee8a16915efe92fb7ad4443ad0b50feaba3fcf051a44eb07b348f4e81577abf319ed40e3a2bf19972af70d751789c7963cc3e234dc85238214e8b9c16ba924289f35482186c955d3cdeb58e3f00414b5f47bd0465ecfe98e3943bcadaca8830142ecaf78a8c8ef3958f1c67efdb1c5add6722a282114be81b3abcd1f547264478f2eb1bbd55e6cf582eaded34c3afdf020000005dc3aa1c81a65ecbe4c047c6bfc9f87dfd652b2b9eeeafd852ace7bcbe5c23cc5d522dbab8a4e3b8860cf829d4ca3372530dd0e392a2bab030b51410c3326b83e4a2a234df9e5f0ab1eb93ba8a8a318aa84423ab000000000000000000", 0xfd}], 0x2, 0x0, 0x0, 0x880}, 0xd01}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="9cd7f25bcf59a54c1f0d9f37bc767396fc5e81285f87d0c6254062d66833edfbd9c825ae1c4245c748f59f3cc48c6e580c3a0a677994a1edbcd4d8dadcbf51601d503ddb843c6e57b1c157526092f6d857c6294421470188831e5a8f7d05ce9fd672d088a340ceb03260d9d32689b1572e3777267c8a0fb696a576e6145b263c6f3829c741dba9fb6f7e332e445ef8baa5834d8cc7d3894599dcd3f8cf6a5088b4c4aa239d6b75652c31118c64072094f7fc362a859e5c7b3aa212b1cb4271329f6b2a30c43c6090", 0xfffffd0e}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/131, 0x0, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 00:29:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='initcall_level\x00', r0}, 0x10) 00:29:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000540), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000100)=""/118}, 0x20) 00:29:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='initcall_level\x00', r0}, 0x10) 00:29:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000540), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000100)=""/118}, 0x20) 00:29:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:38 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:38 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='initcall_level\x00', r0}, 0x10) 00:29:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) [ 845.821745][T25745] syzkaller1: entered promiscuous mode [ 845.838675][T25745] syzkaller1: entered allmulticast mode [ 845.881378][ T2480] syzkaller1: tun_net_xmit 48 [ 845.932891][T25745] syzkaller1: create flow: hash 1855436147 index 1 [ 845.961012][T25744] syzkaller1: delete flow: hash 1855436147 index 1 00:29:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x13, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000001700), 0xffffff1f, r0}, 0x38) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:29:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x731, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) pwrite64(r0, &(0x7f0000002f00)="ef7affb3139a2723d4281746fa5efce24e3603bcfcdf92a4f9b0454572ab46f1eabe4129a6635bb1bf4dff27342ca72736ffb6a2fe4e7d0eaea5ee4e3eb0f287aa89806098d676bafc9993f8ac59a898a2e5069fc4e626572934", 0x5a, 0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000042c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000004300)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000004700)="ebee1d1c5727160f5a692ceb74350769e93a6baf33fd4c106feeb2603e9636abafb9543277767b02f049d3cddb939e238b25521ab216c57c917add0af6866288a26d35504b5c62dbefe9a3db071346d4c446e427c0fba8550a46d0e6966940b643783777017a30bf20d5b0d1ba5bb384704527da6e71f68fd6a7f4f3b7aa73a0015d919f10000000000000", 0x8b, 0x88c4, &(0x7f00000008c0)={0xa, 0x4e24, 0x5761, @remote, 0x99a}, 0x1c) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x234}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000002d80)=""/108, 0x6c}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffffb8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f0000004340)=""/6}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000004600)=""/239, 0xef}, {&(0x7f0000002a40)=""/17, 0x11}], 0x9, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/190, 0xbe}, {&(0x7f0000004540)=""/147, 0x93}], 0x2, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000002f80)=""/154, 0x9a}, {&(0x7f0000003040)=""/54, 0x36}, {&(0x7f0000003080)=""/125, 0x7d}, {&(0x7f0000003100)=""/127, 0x7f}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x6, &(0x7f00000042c0)}}], 0x4, 0x20, &(0x7f0000004440)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000580)={r7, 0x8000, 0x2138, 0x2}) sendmsg$nl_route_sched(r14, &(0x7f0000002e00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a00)=@deltclass={0x30, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0xfff2}, {0xb11a7b2411f7484c, 0x2}, {0xfff1, 0x3}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r11, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r16}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x58}}, 0x0) 00:29:40 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:29:40 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev}, 0x10) 00:29:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:40 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000043}, 0x10) close(r1) 00:29:40 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev}, 0x10) [ 847.616812][T25756] dvmrp0: entered allmulticast mode [ 847.645465][T25749] vlan20: entered promiscuous mode 00:29:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) [ 847.701903][T25749] vlan20: entered allmulticast mode [ 847.762022][T25761] vlan20: entered promiscuous mode [ 847.803821][T25761] vlan20: entered allmulticast mode 00:29:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x731, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) pwrite64(r0, &(0x7f0000002f00)="ef7affb3139a2723d4281746fa5efce24e3603bcfcdf92a4f9b0454572ab46f1eabe4129a6635bb1bf4dff27342ca72736ffb6a2fe4e7d0eaea5ee4e3eb0f287aa89806098d676bafc9993f8ac59a898a2e5069fc4e626572934", 0x5a, 0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000042c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000004300)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000004700)="ebee1d1c5727160f5a692ceb74350769e93a6baf33fd4c106feeb2603e9636abafb9543277767b02f049d3cddb939e238b25521ab216c57c917add0af6866288a26d35504b5c62dbefe9a3db071346d4c446e427c0fba8550a46d0e6966940b643783777017a30bf20d5b0d1ba5bb384704527da6e71f68fd6a7f4f3b7aa73a0015d919f10000000000000", 0x8b, 0x88c4, &(0x7f00000008c0)={0xa, 0x4e24, 0x5761, @remote, 0x99a}, 0x1c) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x234}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000002d80)=""/108, 0x6c}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffffb8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f0000004340)=""/6}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000004600)=""/239, 0xef}, {&(0x7f0000002a40)=""/17, 0x11}], 0x9, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/190, 0xbe}, {&(0x7f0000004540)=""/147, 0x93}], 0x2, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000002f80)=""/154, 0x9a}, {&(0x7f0000003040)=""/54, 0x36}, {&(0x7f0000003080)=""/125, 0x7d}, {&(0x7f0000003100)=""/127, 0x7f}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x6, &(0x7f00000042c0)}}], 0x4, 0x20, &(0x7f0000004440)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000580)={r7, 0x8000, 0x2138, 0x2}) sendmsg$nl_route_sched(r14, &(0x7f0000002e00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a00)=@deltclass={0x30, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0xfff2}, {0xb11a7b2411f7484c, 0x2}, {0xfff1, 0x3}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r11, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r16}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x58}}, 0x0) [ 848.253280][T25762] syzkaller1: entered promiscuous mode [ 848.319493][T25762] syzkaller1: entered allmulticast mode [ 848.389807][T25769] dvmrp0: left allmulticast mode 00:29:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 848.508903][T25772] dvmrp0: entered allmulticast mode [ 848.527862][T25785] vlan20: entered promiscuous mode [ 848.549388][T25785] vlan20: entered allmulticast mode 00:29:41 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev}, 0x10) [ 848.572974][T25754] syzkaller1: create flow: hash 1855436147 index 1 [ 848.578519][ T14] syzkaller1: tun_net_xmit 48 [ 848.597037][T25786] vlan20: entered promiscuous mode [ 848.613113][T25786] vlan20: entered allmulticast mode [ 848.735835][T25776] syzkaller1: entered promiscuous mode [ 848.757619][T25776] syzkaller1: entered allmulticast mode [ 848.971645][T25791] dvmrp0: left allmulticast mode [ 849.047864][T25792] dvmrp0: entered allmulticast mode [ 849.071937][T25752] syzkaller1: delete flow: hash 1855436147 index 1 00:29:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x13, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000001700), 0xffffff1f, r0}, 0x38) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:29:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x731, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) pwrite64(r0, &(0x7f0000002f00)="ef7affb3139a2723d4281746fa5efce24e3603bcfcdf92a4f9b0454572ab46f1eabe4129a6635bb1bf4dff27342ca72736ffb6a2fe4e7d0eaea5ee4e3eb0f287aa89806098d676bafc9993f8ac59a898a2e5069fc4e626572934", 0x5a, 0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000042c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000004300)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000004700)="ebee1d1c5727160f5a692ceb74350769e93a6baf33fd4c106feeb2603e9636abafb9543277767b02f049d3cddb939e238b25521ab216c57c917add0af6866288a26d35504b5c62dbefe9a3db071346d4c446e427c0fba8550a46d0e6966940b643783777017a30bf20d5b0d1ba5bb384704527da6e71f68fd6a7f4f3b7aa73a0015d919f10000000000000", 0x8b, 0x88c4, &(0x7f00000008c0)={0xa, 0x4e24, 0x5761, @remote, 0x99a}, 0x1c) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x234}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000002d80)=""/108, 0x6c}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffffb8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f0000004340)=""/6}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000004600)=""/239, 0xef}, {&(0x7f0000002a40)=""/17, 0x11}], 0x9, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/190, 0xbe}, {&(0x7f0000004540)=""/147, 0x93}], 0x2, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000002f80)=""/154, 0x9a}, {&(0x7f0000003040)=""/54, 0x36}, {&(0x7f0000003080)=""/125, 0x7d}, {&(0x7f0000003100)=""/127, 0x7f}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x6, &(0x7f00000042c0)}}], 0x4, 0x20, &(0x7f0000004440)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000580)={r7, 0x8000, 0x2138, 0x2}) sendmsg$nl_route_sched(r14, &(0x7f0000002e00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a00)=@deltclass={0x30, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0xfff2}, {0xb11a7b2411f7484c, 0x2}, {0xfff1, 0x3}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r11, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r16}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x58}}, 0x0) 00:29:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:44 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000080)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev}, 0x10) 00:29:44 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 851.184091][T25806] dvmrp0: left allmulticast mode [ 851.300790][T25800] syzkaller1: entered promiscuous mode [ 851.315319][T25800] syzkaller1: entered allmulticast mode [ 851.337007][T25804] vlan20: entered promiscuous mode [ 851.363896][T25804] vlan20: entered allmulticast mode [ 851.475913][T25809] dvmrp0: entered allmulticast mode [ 851.564186][T25810] vlan20: entered promiscuous mode [ 851.592387][T25810] vlan20: entered allmulticast mode 00:29:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:29:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x731, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) pwrite64(r0, &(0x7f0000002f00)="ef7affb3139a2723d4281746fa5efce24e3603bcfcdf92a4f9b0454572ab46f1eabe4129a6635bb1bf4dff27342ca72736ffb6a2fe4e7d0eaea5ee4e3eb0f287aa89806098d676bafc9993f8ac59a898a2e5069fc4e626572934", 0x5a, 0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000042c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000004300)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000004700)="ebee1d1c5727160f5a692ceb74350769e93a6baf33fd4c106feeb2603e9636abafb9543277767b02f049d3cddb939e238b25521ab216c57c917add0af6866288a26d35504b5c62dbefe9a3db071346d4c446e427c0fba8550a46d0e6966940b643783777017a30bf20d5b0d1ba5bb384704527da6e71f68fd6a7f4f3b7aa73a0015d919f10000000000000", 0x8b, 0x88c4, &(0x7f00000008c0)={0xa, 0x4e24, 0x5761, @remote, 0x99a}, 0x1c) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x234}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) socket(0x1, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000440)=[{&(0x7f0000002d80)=""/108, 0x6c}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESDEC=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xffffffffffffffb8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/129, 0x81}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f0000004340)=""/6}, {&(0x7f0000000900)=""/57, 0x39}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000004600)=""/239, 0xef}, {&(0x7f0000002a40)=""/17, 0x11}], 0x9, &(0x7f0000002b40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/190, 0xbe}, {&(0x7f0000004540)=""/147, 0x93}], 0x2, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000004240)=[{&(0x7f0000002f80)=""/154, 0x9a}, {&(0x7f0000003040)=""/54, 0x36}, {&(0x7f0000003080)=""/125, 0x7d}, {&(0x7f0000003100)=""/127, 0x7f}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x6, &(0x7f00000042c0)}}], 0x4, 0x20, &(0x7f0000004440)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000580)={r7, 0x8000, 0x2138, 0x2}) sendmsg$nl_route_sched(r14, &(0x7f0000002e00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a00)=@deltclass={0x30, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xa, 0xfff2}, {0xb11a7b2411f7484c, 0x2}, {0xfff1, 0x3}}, [@tclass_kind_options=@c_skbprio={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r11, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x38}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r16}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}]}, 0x58}}, 0x0) [ 851.807683][T25814] syzkaller1: entered promiscuous mode [ 851.855122][T25814] syzkaller1: entered allmulticast mode [ 851.943451][ T14] syzkaller1: tun_net_xmit 48 [ 851.956657][ T2480] syzkaller1: tun_net_xmit 48 00:29:44 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 852.124041][T25826] vlan20: entered promiscuous mode [ 852.136330][T25826] vlan20: entered allmulticast mode [ 852.272811][T25829] vlan20: entered promiscuous mode [ 852.294658][T25829] vlan20: entered allmulticast mode 00:29:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:45 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) [ 852.798086][T25835] syzkaller1: entered promiscuous mode [ 852.804586][T25835] syzkaller1: entered allmulticast mode [ 861.368423][T25844] syzkaller1: entered promiscuous mode [ 861.410643][T25844] syzkaller1: entered allmulticast mode [ 861.481466][ T5161] syzkaller1: tun_net_xmit 48 00:29:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x13, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000001700), 0xffffff1f, r0}, 0x38) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 00:29:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:29:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) 00:29:56 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:29:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005400)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 00:29:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005400)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 00:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) [ 864.234208][T25862] syzkaller1: entered promiscuous mode [ 864.437047][T25862] syzkaller1: entered allmulticast mode [ 869.871609][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.878055][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.557627][ T14] syzkaller1: tun_net_xmit 48 00:30:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005400)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) [ 882.508781][ C0] syzkaller1: tun_net_xmit 48 00:30:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) 00:30:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) 00:30:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:30:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3b781bb9f1"], 0x20000600}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, 0x0}, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 00:31:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x30}}, 0x0) [ 931.312279][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.318931][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 00:31:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005400)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 00:31:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) [ 948.051283][T25867] syz_tun (unregistering): left promiscuous mode 00:31:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x10}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000240)={@void, @val={0x6}, @ipv6=@udp={0xc, 0x6, "83260d", 0x15c, 0x11, 0xff, @mcast1, @empty, {[@routing={0x2c, 0xe, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], {0x4e21, 0x4e21, 0xe4, 0x0, @wg=@data={0x4, 0xc00000, 0xfffffffffffffffe, "0fc05e8b2f0863e0448356f35acb0660af14bcc34d7649834be4a73b0ca867cc61414108ded464b8bb148beb8580e875b57f94303d27f84f3b3708b240e4f349ceeb2e2ae646bba7265466392af0aca790da269944816d96566636ed7737fce34e4fdc53ca53f13915856960e570198624946bb495f2afbcba8f0d9d27f85259b4316e486460ffdbe2f79cd793d698b479ba1b55fdaeacd5e0e163e35d2c00281ca12eb789632650f56d5b2f2a87a585013027decd48b9327f021624d34ec6b1d0b1b64b757167ed05953731"}}}}}, 0x18e) [ 955.058865][ T41] batadv_slave_0: left promiscuous mode [ 955.112187][ T41] vlan19: left allmulticast mode [ 955.117208][ T41] vlan19: left promiscuous mode [ 955.138835][ T41] bridge24: port 1(vlan19) entered disabled state [ 955.150165][ T41] vlan17: left allmulticast mode [ 955.155146][ T41] vlan17: left promiscuous mode [ 955.178871][ T41] bridge22: port 1(vlan17) entered disabled state [ 955.194855][ T41] vlan15: left allmulticast mode [ 955.208647][ T41] vlan15: left promiscuous mode [ 955.213662][ T41] bridge20: port 1(vlan15) entered disabled state [ 955.239015][ T41] vlan13: left allmulticast mode [ 955.244003][ T41] vlan13: left promiscuous mode [ 955.257799][ T41] bridge18: port 1(vlan13) entered disabled state [ 955.376707][ T41] hsr_slave_0: left promiscuous mode [ 955.397766][ T41] hsr_slave_1: left promiscuous mode [ 955.448914][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.501500][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.530993][ T41] team3: left allmulticast mode [ 955.535975][ T41] team3: left promiscuous mode [ 955.568829][ T41] bridge0: port 5(team3) entered disabled state [ 955.640740][ T41] team2: left allmulticast mode [ 955.645737][ T41] team2: left promiscuous mode [ 955.658756][ T41] bridge0: port 4(team2) entered disabled state [ 955.730309][ T41] team1: left allmulticast mode [ 955.735226][ T41] team1: left promiscuous mode [ 955.758693][ T41] bridge0: port 3(team1) entered disabled state [ 955.829340][ T41] bridge_slave_1: left allmulticast mode [ 955.835042][ T41] bridge_slave_1: left promiscuous mode [ 955.878896][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.909240][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 955.918747][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 955.926557][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 955.934416][ T41] bridge_slave_0: left allmulticast mode [ 955.941583][T25914] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 955.948885][T25914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 955.998586][ T41] bridge_slave_0: left promiscuous mode [ 956.004393][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.133030][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 956.143126][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 956.152875][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 956.160654][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 956.167940][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 956.193338][T25919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.202707][T25919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.212057][T25919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.235927][T25914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.243957][T25914] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 956.261344][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 956.292521][T25926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.300548][T25926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 956.312361][T25926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 956.320759][T25926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 956.328333][T25926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 956.337015][T25926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 956.345630][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 956.353273][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 956.360924][T25926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 956.372608][T25926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 956.374564][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 956.387638][T25929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 956.388422][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 956.403064][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 956.404202][T25929] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 956.421898][T25914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.439180][T25929] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 956.446502][T25929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 957.131922][ T41] bond14 (unregistering): (slave bridge36): Releasing backup interface [ 957.140495][ T41] bridge36 (unregistering): left promiscuous mode [ 957.193439][ T41] bond14 (unregistering): Released all slaves [ 957.290578][ T41] bond13 (unregistering): (slave bridge33): Releasing backup interface [ 957.300618][ T41] bridge33 (unregistering): left promiscuous mode [ 957.382583][ T41] bond13 (unregistering): Released all slaves [ 957.524544][ T41] bond12 (unregistering): (slave bridge30): Releasing backup interface [ 957.533422][ T41] bridge30 (unregistering): left promiscuous mode [ 957.581615][ T41] bond12 (unregistering): Released all slaves [ 957.721398][ T41] bond11 (unregistering): (slave bridge27): Releasing backup interface [ 957.729832][ T41] bridge27 (unregistering): left promiscuous mode [ 957.782499][ T41] bond11 (unregistering): Released all slaves [ 957.954852][ T41] team7 (unregistering): Port device batadv8 removed [ 957.966296][ T41] team7 (unregistering): Port device macvlan9 removed [ 957.977830][ T41] team7 (unregistering): Port device macvlan8 removed [ 958.010743][ T41] team6 (unregistering): Port device batadv7 removed [ 958.026960][ T41] team6 (unregistering): Port device macvlan7 removed [ 958.038333][ T41] team6 (unregistering): Port device macvlan6 removed [ 958.038822][T25929] Bluetooth: hci0: command 0x0409 tx timeout [ 958.074408][ T41] team5 (unregistering): Port device batadv6 removed [ 958.087418][ T41] team5 (unregistering): Port device macvlan5 removed [ 958.109341][ T41] team5 (unregistering): Port device macvlan4 removed [ 958.137698][ T41] team4 (unregistering): Port device batadv5 removed [ 958.150127][ T41] team4 (unregistering): Port device macvlan3 removed [ 958.161352][ T41] team4 (unregistering): Port device macvlan2 removed [ 958.188998][T25929] Bluetooth: hci1: command 0x0409 tx timeout [ 958.428927][T25929] Bluetooth: hci5: command 0x0409 tx timeout [ 958.438925][T25929] Bluetooth: hci2: command 0x0409 tx timeout [ 958.518657][T25929] Bluetooth: hci3: command 0x0409 tx timeout [ 958.525301][T25929] Bluetooth: hci4: command 0x0409 tx timeout [ 958.651372][ T41] bond10 (unregistering): (slave vlan11): Releasing backup interface [ 958.713145][ T41] bond10 (unregistering): Released all slaves [ 958.726196][ T41] bond9 (unregistering): (slave vlan10): Releasing backup interface [ 958.830072][ T41] bond9 (unregistering): Released all slaves [ 958.843103][ T41] bond8 (unregistering): (slave vlan9): Releasing backup interface [ 958.892114][ T41] bond8 (unregistering): Released all slaves [ 958.905300][ T41] bond7 (unregistering): (slave vlan8): Releasing backup interface [ 958.962093][ T41] bond7 (unregistering): Released all slaves [ 958.975043][ T41] bond6 (unregistering): (slave vlan7): Releasing backup interface [ 959.035490][ T41] bond6 (unregistering): Released all slaves [ 959.048341][ T41] bond5 (unregistering): (slave vlan6): Releasing backup interface [ 959.132160][ T41] bond5 (unregistering): Released all slaves [ 960.025218][ T41] bond4 (unregistering): Released all slaves [ 960.046449][ T41] bond3 (unregistering): Released all slaves [ 960.063535][ T41] bond2 (unregistering): Released all slaves [ 960.081247][ T41] bond1 (unregistering): Released all slaves [ 960.108839][T25929] Bluetooth: hci0: command 0x041b tx timeout [ 960.205706][ T41] team0 (unregistering): Port device team_slave_1 removed [ 960.221180][ T41] team0 (unregistering): Port device team_slave_0 removed [ 960.240421][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.257174][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.268900][T25929] Bluetooth: hci1: command 0x041b tx timeout [ 960.343177][ T41] bond0 (unregistering): Released all slaves [ 960.513419][T25929] Bluetooth: hci2: command 0x041b tx timeout [ 960.519515][T25929] Bluetooth: hci5: command 0x041b tx timeout [ 960.588833][T25919] Bluetooth: hci4: command 0x041b tx timeout [ 960.594887][T25919] Bluetooth: hci3: command 0x041b tx timeout [ 961.075109][T25916] chnl_net:caif_netlink_parms(): no params data found [ 961.136792][T25912] chnl_net:caif_netlink_parms(): no params data found [ 961.385087][T25918] chnl_net:caif_netlink_parms(): no params data found [ 961.395818][T25922] chnl_net:caif_netlink_parms(): no params data found [ 961.630248][T25912] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.648673][T25912] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.669017][T25912] bridge_slave_0: entered allmulticast mode [ 961.679017][T25912] bridge_slave_0: entered promiscuous mode [ 961.732691][T25916] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.748628][T25916] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.755812][T25916] bridge_slave_0: entered allmulticast mode [ 961.767046][T25916] bridge_slave_0: entered promiscuous mode [ 961.777917][T25925] chnl_net:caif_netlink_parms(): no params data found [ 961.799088][T25923] chnl_net:caif_netlink_parms(): no params data found [ 961.809298][T25912] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.816389][T25912] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.823775][T25912] bridge_slave_1: entered allmulticast mode [ 961.830793][T25912] bridge_slave_1: entered promiscuous mode [ 961.875226][T25916] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.900076][T25916] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.907457][T25916] bridge_slave_1: entered allmulticast mode [ 961.922478][T25916] bridge_slave_1: entered promiscuous mode [ 962.071532][T25918] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.081908][T25918] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.098955][T25918] bridge_slave_0: entered allmulticast mode [ 962.106056][T25918] bridge_slave_0: entered promiscuous mode [ 962.161383][T25916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.188968][T25919] Bluetooth: hci0: command 0x040f tx timeout [ 962.201583][T25912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.228743][T25918] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.235844][T25918] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.268899][T25918] bridge_slave_1: entered allmulticast mode [ 962.275864][T25918] bridge_slave_1: entered promiscuous mode [ 962.334349][T25916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.348697][T25919] Bluetooth: hci1: command 0x040f tx timeout [ 962.382037][T25912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.479972][T25922] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.487100][T25922] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.518872][T25922] bridge_slave_0: entered allmulticast mode [ 962.525889][T25922] bridge_slave_0: entered promiscuous mode [ 962.589235][T25919] Bluetooth: hci5: command 0x040f tx timeout [ 962.595277][T25919] Bluetooth: hci2: command 0x040f tx timeout [ 962.670222][T25919] Bluetooth: hci3: command 0x040f tx timeout [ 962.676278][T25919] Bluetooth: hci4: command 0x040f tx timeout [ 962.711525][T25918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.781929][T25922] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.790074][T25922] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.797357][T25922] bridge_slave_1: entered allmulticast mode [ 962.840071][T25922] bridge_slave_1: entered promiscuous mode [ 962.883536][T25912] team0: Port device team_slave_0 added [ 962.904764][T25918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.973499][T25916] team0: Port device team_slave_0 added [ 963.021275][T25925] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.028408][T25925] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.049293][T25925] bridge_slave_0: entered allmulticast mode [ 963.068948][T25925] bridge_slave_0: entered promiscuous mode [ 963.090881][T25912] team0: Port device team_slave_1 added [ 963.139897][T25923] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.147004][T25923] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.169003][T25923] bridge_slave_0: entered allmulticast mode [ 963.175954][T25923] bridge_slave_0: entered promiscuous mode [ 963.204634][T25916] team0: Port device team_slave_1 added [ 963.246859][T25925] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.258751][T25925] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.265928][T25925] bridge_slave_1: entered allmulticast mode [ 963.289769][T25925] bridge_slave_1: entered promiscuous mode [ 963.321343][T25918] team0: Port device team_slave_0 added [ 963.327554][T25923] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.348761][T25923] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.355947][T25923] bridge_slave_1: entered allmulticast mode [ 963.369653][T25923] bridge_slave_1: entered promiscuous mode [ 963.403021][T25922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.510661][T25912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.517666][T25912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.545010][T25912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.567554][T25918] team0: Port device team_slave_1 added [ 963.598718][T25922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.610417][T25925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.630980][T25925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.649734][T25912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.656697][T25912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.718812][T25912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.770767][T25916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.777740][T25916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.804621][T25916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.860696][T25923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.871201][T25916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.878163][T25916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.905055][T25916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.929647][T25925] team0: Port device team_slave_0 added [ 963.940148][T25918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.947110][T25918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.973687][T25918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.986611][T25918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.993865][T25918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.020402][T25918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.034781][T25923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.062376][T25922] team0: Port device team_slave_0 added [ 964.070236][T25925] team0: Port device team_slave_1 added [ 964.120849][T25922] team0: Port device team_slave_1 added [ 964.187346][T25912] hsr_slave_0: entered promiscuous mode [ 964.195247][T25912] hsr_slave_1: entered promiscuous mode [ 964.204691][T25922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.212501][T25922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.238849][T25922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.269002][T25919] Bluetooth: hci0: command 0x0419 tx timeout [ 964.281127][T25923] team0: Port device team_slave_0 added [ 964.287759][T25925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.295707][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.322816][T25925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.370694][T25922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.377670][T25922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.410926][T25922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.426505][T25916] hsr_slave_0: entered promiscuous mode [ 964.432564][T25919] Bluetooth: hci1: command 0x0419 tx timeout [ 964.440089][T25916] hsr_slave_1: entered promiscuous mode [ 964.446277][T25916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.454032][T25916] Cannot create hsr debugfs directory [ 964.463654][T25923] team0: Port device team_slave_1 added [ 964.474427][T25918] hsr_slave_0: entered promiscuous mode [ 964.481124][T25918] hsr_slave_1: entered promiscuous mode [ 964.487306][T25918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.494977][T25918] Cannot create hsr debugfs directory [ 964.502055][T25925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.509109][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.537216][T25925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.668856][T25919] Bluetooth: hci2: command 0x0419 tx timeout [ 964.674910][T25919] Bluetooth: hci5: command 0x0419 tx timeout [ 964.749067][T25919] Bluetooth: hci4: command 0x0419 tx timeout [ 964.755981][T25929] Bluetooth: hci3: command 0x0419 tx timeout [ 964.780121][T25923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.787102][T25923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.838293][T25923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.876335][T25925] hsr_slave_0: entered promiscuous mode [ 964.899775][T25925] hsr_slave_1: entered promiscuous mode [ 964.905985][T25925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.918896][T25925] Cannot create hsr debugfs directory [ 964.956755][T25923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.978580][T25923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.068529][T25923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.156707][T25922] hsr_slave_0: entered promiscuous mode [ 965.189376][T25922] hsr_slave_1: entered promiscuous mode [ 965.203837][T25922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.218535][T25922] Cannot create hsr debugfs directory [ 965.550827][T25923] hsr_slave_0: entered promiscuous mode [ 965.584059][T25923] hsr_slave_1: entered promiscuous mode [ 965.619341][T25923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.626930][T25923] Cannot create hsr debugfs directory [ 966.235257][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.374174][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.451417][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.526267][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.750860][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 966.851305][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 966.926611][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 966.992867][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 967.174025][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 967.269808][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 967.353301][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 967.449342][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 967.623718][ T41] : left promiscuous mode [ 967.700321][ T41] : left promiscuous mode [ 967.759545][ T41] : left promiscuous mode [ 967.904006][ T41] tipc: Left network mode [ 967.914812][ T41] tipc: Left network mode [ 969.341650][ T41] dvmrp0 (unregistering): left allmulticast mode [ 969.421774][ T41] IPVS: stopping master sync thread 6067 ... [ 969.438705][ T41] IPVS: stopping master sync thread 19684 ... [ 969.449968][ T41] IPVS: stopping master sync thread 6065 ... [ 970.273233][ T41] hsr_slave_0: left promiscuous mode [ 970.284949][ T41] hsr_slave_1: left promiscuous mode [ 970.291700][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.302138][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.311662][ T41] bridge_slave_1: left allmulticast mode [ 970.317329][ T41] bridge_slave_1: left promiscuous mode [ 970.323413][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.332213][ T41] bridge_slave_0: left allmulticast mode [ 970.337973][ T41] bridge_slave_0: left promiscuous mode [ 970.359609][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.424528][ T41] hsr_slave_0: left promiscuous mode [ 970.439617][ T41] hsr_slave_1: left promiscuous mode [ 970.449025][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.471443][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.490706][ T41] bridge_slave_1: left allmulticast mode [ 970.496378][ T41] bridge_slave_1: left promiscuous mode [ 970.518648][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.547194][ T41] vlan5: left allmulticast mode [ 970.552366][ T41] vlan5: left promiscuous mode [ 970.557260][ T41] bridge15: port 1(vlan5) entered disabled state [ 970.593275][ T41] vlan3: left allmulticast mode [ 970.598182][ T41] vlan3: left promiscuous mode [ 970.618791][ T41] bridge13: port 1(vlan3) entered disabled state [ 970.658036][ T41] hsr_slave_0: left promiscuous mode [ 970.678862][ T41] hsr_slave_1: left promiscuous mode [ 970.686137][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.708670][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.719105][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.726533][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.751630][ T41] bridge_slave_0: left allmulticast mode [ 970.757301][ T41] bridge_slave_0: left promiscuous mode [ 970.763212][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.823597][ T41] hsr_slave_0: left promiscuous mode [ 970.837618][ T41] hsr_slave_1: left promiscuous mode [ 970.843912][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.853843][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.863337][ T41] batman_adv: batadv0: Removing interface: vlan2 [ 970.871974][ T41] team3: left allmulticast mode [ 970.876857][ T41] team3: left promiscuous mode [ 970.882087][ T41] bridge0: port 3(team3) entered disabled state [ 970.890885][ T41] team2: left allmulticast mode [ 970.895766][ T41] team2: left promiscuous mode [ 970.901260][ T41] bridge0: port 2(team2) entered disabled state [ 970.909215][ T41] team1: left allmulticast mode [ 970.914099][ T41] team1: left promiscuous mode [ 970.920137][ T41] bridge0: port 1(team1) entered disabled state [ 970.942429][ T41] vlan7: left allmulticast mode [ 970.947320][ T41] vlan7: left promiscuous mode [ 970.952614][ T41] bridge14: port 1(vlan7) entered disabled state [ 970.962880][ T41] vlan5: left allmulticast mode [ 970.967762][ T41] vlan5: left promiscuous mode [ 970.974188][ T41] bridge12: port 1(vlan5) entered disabled state [ 970.986117][ T41] vlan3: left allmulticast mode [ 970.991190][ T41] vlan3: left promiscuous mode [ 970.996096][ T41] bridge10: port 1(vlan3) entered disabled state [ 971.020167][ T41] hsr_slave_0: left promiscuous mode [ 971.026213][ T41] hsr_slave_1: left promiscuous mode [ 971.033212][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.042889][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.052541][ T41] team4: left allmulticast mode [ 971.057423][ T41] team4: left promiscuous mode [ 971.062672][ T41] bridge0: port 6(team4) entered disabled state [ 971.070581][ T41] team3: left allmulticast mode [ 971.075459][ T41] team3: left promiscuous mode [ 971.080717][ T41] bridge0: port 5(team3) entered disabled state [ 971.088354][ T41] team2: left allmulticast mode [ 971.093579][ T41] team2: left promiscuous mode [ 971.098465][ T41] bridge0: port 4(team2) entered disabled state [ 971.106587][ T41] team1: left allmulticast mode [ 971.111612][ T41] team1: left promiscuous mode [ 971.116488][ T41] bridge0: port 3(team1) entered disabled state [ 971.124873][ T41] bridge_slave_1: left allmulticast mode [ 971.130581][ T41] bridge_slave_1: left promiscuous mode [ 971.136253][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.146912][ T41] bridge_slave_0: left allmulticast mode [ 971.152667][ T41] bridge_slave_0: left promiscuous mode [ 971.158338][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.192752][ T41] veth1_macvtap: left promiscuous mode [ 971.198298][ T41] veth0_macvtap: left promiscuous mode [ 971.204375][ T41] veth1_vlan: left promiscuous mode [ 971.662686][ T41] bond18 (unregistering): Released all slaves [ 971.676789][ T41] bond17 (unregistering): Released all slaves [ 971.693739][ T41] bond16 (unregistering): Released all slaves [ 971.723094][ T41] bond15 (unregistering): Released all slaves [ 971.737296][ T41] bond14 (unregistering): Released all slaves [ 971.751805][ T41] bond13 (unregistering): Released all slaves [ 971.765715][ T41] bond12 (unregistering): Released all slaves [ 971.914494][ T41] bond11 (unregistering): Released all slaves [ 971.928554][ T41] bond10 (unregistering): Released all slaves [ 971.942283][ T41] bond9 (unregistering): Released all slaves [ 971.957574][ T41] bond8 (unregistering): Released all slaves [ 972.142719][ T41] team3 (unregistering): Port device batadv3 removed [ 972.154680][ T41] team3 (unregistering): Port device macvlan7 removed [ 972.167484][ T41] team3 (unregistering): Port device macvlan6 removed [ 972.198793][ T41] team2 (unregistering): Port device batadv2 removed [ 972.209925][ T41] team2 (unregistering): Port device macvlan5 removed [ 972.220969][ T41] team2 (unregistering): Port device macvlan4 removed [ 972.249829][ T41] team1 (unregistering): Port device batadv1 removed [ 972.267017][ T41] team1 (unregistering): Port device macvlan3 removed [ 972.279970][ T41] team1 (unregistering): Port device macvlan2 removed [ 972.331316][ T41] bond7 (unregistering): (slave vlan3): Releasing backup interface [ 972.412209][ T41] bond7 (unregistering): Released all slaves [ 972.425255][ T41] bond6 (unregistering): (slave vlan2): Releasing backup interface [ 972.494838][ T41] bond6 (unregistering): Released all slaves [ 972.507543][ T41] bond5 (unregistering): (slave vlan1): Releasing backup interface [ 972.581107][ T41] bond5 (unregistering): Released all slaves [ 972.593329][ T41] bond4 (unregistering): (slave vlan0): Releasing backup interface [ 972.641897][ T41] bond4 (unregistering): Released all slaves [ 973.181651][ T41] bond3 (unregistering): Released all slaves [ 973.195456][ T41] bond2 (unregistering): Released all slaves [ 973.209613][ T41] bond1 (unregistering): Released all slaves [ 973.387354][ T41] team0 (unregistering): Port device team_slave_1 removed [ 973.405885][ T41] team0 (unregistering): Port device team_slave_0 removed [ 973.421783][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.437303][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.525489][ T41] bond0 (unregistering): Released all slaves [ 973.906958][ T41] team3 (unregistering): Port device batadv11 removed [ 973.919626][ T41] team3 (unregistering): Port device macvlan7 removed [ 973.931681][ T41] team3 (unregistering): Port device macvlan6 removed [ 973.967828][ T41] team2 (unregistering): Port device batadv10 removed [ 973.979948][ T41] team2 (unregistering): Port device macvlan5 removed [ 973.991343][ T41] team2 (unregistering): Port device macvlan4 removed [ 974.019983][ T41] team1 (unregistering): Port device batadv9 removed [ 974.032317][ T41] team1 (unregistering): Port device macvlan3 removed [ 974.043837][ T41] team1 (unregistering): Port device macvlan2 removed [ 975.158831][ T41] team0 (unregistering): Port device team_slave_1 removed [ 975.179895][ T41] team0 (unregistering): Port device team_slave_0 removed [ 975.198782][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.216252][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.281221][ T41] bond0 (unregistering): Released all slaves [ 975.621286][ T41] bond3 (unregistering): (slave bridge19): Releasing backup interface [ 975.629700][ T41] bridge19 (unregistering): left promiscuous mode [ 975.682921][ T41] bond3 (unregistering): Released all slaves [ 975.695759][ T41] bond2 (unregistering): (slave bridge18): Releasing backup interface [ 975.704358][ T41] bridge18 (unregistering): left promiscuous mode [ 975.788991][ T41] bond2 (unregistering): Released all slaves [ 975.807956][ T41] bond1 (unregistering): (slave bridge17): Releasing backup interface [ 975.816588][ T41] bridge17 (unregistering): left promiscuous mode [ 975.913310][ T41] bond1 (unregistering): Released all slaves [ 976.214408][ T41] bond0 (unregistering): (slave bridge10): Releasing backup interface [ 976.321264][ T41] bond0 (unregistering): (slave bridge9): Releasing backup interface [ 976.413341][ T41] bond0 (unregistering): (slave bridge8): Releasing backup interface [ 976.501232][ T41] bond0 (unregistering): (slave bridge7): Releasing backup interface [ 977.001577][ T41] team0 (unregistering): Port device team_slave_1 removed [ 977.020176][ T41] team0 (unregistering): Port device team_slave_0 removed [ 977.035884][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.057046][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.146842][ T41] bond0 (unregistering): Released all slaves [ 977.329045][ T41] bond13 (unregistering): (slave bridge18): Releasing backup interface [ 977.337350][ T41] bridge18 (unregistering): left promiscuous mode [ 977.382523][ T41] bond13 (unregistering): Released all slaves [ 977.396529][ T41] bond12 (unregistering): (slave bridge17): Releasing backup interface [ 977.405215][ T41] bridge17 (unregistering): left promiscuous mode [ 977.512706][ T41] bond12 (unregistering): Released all slaves [ 977.525564][ T41] bond11 (unregistering): (slave bridge16): Releasing backup interface [ 977.534220][ T41] bridge16 (unregistering): left promiscuous mode [ 977.595916][ T41] bond11 (unregistering): Released all slaves [ 977.619750][ T41] bond10 (unregistering): Released all slaves [ 977.638954][ T41] bond9 (unregistering): Released all slaves [ 977.654120][ T41] bond8 (unregistering): Released all slaves [ 977.674211][ T41] team6 (unregistering): Port device batadv8 removed [ 977.685262][ T41] team6 (unregistering): Port device macvlan7 removed [ 977.696594][ T41] team6 (unregistering): Port device macvlan6 removed [ 977.734653][ T41] team5 (unregistering): Port device batadv7 removed [ 977.746862][ T41] team5 (unregistering): Port device macvlan5 removed [ 977.759487][ T41] team5 (unregistering): Port device macvlan4 removed [ 977.788770][ T41] team4 (unregistering): Port device batadv6 removed [ 977.800123][ T41] team4 (unregistering): Port device macvlan3 removed [ 977.811138][ T41] team4 (unregistering): Port device macvlan2 removed [ 978.551486][ T41] bond7 (unregistering): Released all slaves [ 978.565434][ T41] bond6 (unregistering): Released all slaves [ 978.580337][ T41] bond5 (unregistering): Released all slaves [ 978.593972][ T41] bond4 (unregistering): Released all slaves [ 978.713587][ T41] bond3 (unregistering): Released all slaves [ 978.730526][ T41] bond2 (unregistering): Released all slaves [ 978.747664][ T41] bond1 (unregistering): Released all slaves [ 979.113462][ T41] bond0 (unregistering): Released all slaves [ 979.393140][ T41] bond20 (unregistering): (slave bridge23): Releasing backup interface [ 979.401501][ T41] bridge23 (unregistering): left promiscuous mode [ 979.472576][ T41] bond20 (unregistering): Released all slaves [ 979.485987][ T41] bond19 (unregistering): (slave bridge22): Releasing backup interface [ 979.494500][ T41] bridge22 (unregistering): left promiscuous mode [ 979.552446][ T41] bond19 (unregistering): Released all slaves [ 979.565188][ T41] bond18 (unregistering): (slave bridge21): Releasing backup interface [ 979.573853][ T41] bridge21 (unregistering): left promiscuous mode [ 979.620880][ T41] bond18 (unregistering): Released all slaves [ 979.632678][ T41] bond17 (unregistering): (slave bridge20): Releasing backup interface [ 979.641330][ T41] bridge20 (unregistering): left promiscuous mode [ 979.713399][ T41] bond17 (unregistering): Released all slaves [ 979.726956][ T41] bond16 (unregistering): Released all slaves [ 979.740889][ T41] bond15 (unregistering): Released all slaves [ 979.754617][ T41] bond14 (unregistering): Released all slaves [ 979.768440][ T41] bond13 (unregistering): Released all slaves [ 979.782401][ T41] bond12 (unregistering): Released all slaves [ 979.795933][ T41] bond11 (unregistering): Released all slaves [ 979.813246][ T41] bond10 (unregistering): Released all slaves [ 980.042563][ T41] bond9 (unregistering): (slave bridge16): Releasing backup interface [ 980.222035][ T41] bond9 (unregistering): Released all slaves [ 980.872321][ T41] bond8 (unregistering): Released all slaves [ 980.886919][ T41] bond7 (unregistering): Released all slaves [ 980.901211][ T41] bond6 (unregistering): Released all slaves [ 980.915117][ T41] bond5 (unregistering): Released all slaves [ 980.969255][ T41] bond4 (unregistering): Released all slaves [ 980.984978][ T41] bond3 (unregistering): Released all slaves [ 981.003392][ T41] bond2 (unregistering): Released all slaves [ 981.018818][ T41] bond1 (unregistering): Released all slaves [ 981.637681][ T41] team0 (unregistering): Port device team_slave_1 removed [ 981.652360][ T41] team0 (unregistering): Port device team_slave_0 removed [ 981.668460][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.684634][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.765503][ T41] bond0 (unregistering): Released all slaves [ 992.752207][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.758714][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.704383][T25929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1021.713017][T25929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1021.721933][T25929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1021.729837][T25929] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1021.737136][T25929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1021.968873][T25919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1021.977788][T25919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1021.985851][T25919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1021.994759][T25919] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1022.003383][T25919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1022.158895][T25914] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1022.167871][T25914] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1022.176439][T25914] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1022.183937][T25914] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1022.191265][T25914] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1022.239852][T25929] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1022.249115][T25929] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1022.258366][T25929] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1022.268046][T25929] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1022.276781][T25929] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1022.284074][T25929] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1022.425417][T25914] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1022.442171][T25914] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1022.452584][T25914] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1022.464774][ T5107] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1022.474421][ T5107] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1022.476482][T25914] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1022.490787][T25914] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1022.497895][T25930] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1022.506340][T25930] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1022.532148][T25930] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1022.540070][T25930] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1022.547430][T25930] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1023.798148][T25919] Bluetooth: hci6: command 0x0409 tx timeout [ 1024.028772][T25919] Bluetooth: hci7: command 0x0409 tx timeout [ 1024.268659][T25919] Bluetooth: hci8: command 0x0409 tx timeout [ 1024.348780][T25919] Bluetooth: hci9: command 0x0409 tx timeout [ 1024.589480][T25919] Bluetooth: hci11: command 0x0409 tx timeout [ 1024.596085][T25919] Bluetooth: hci10: command 0x0409 tx timeout [ 1025.868636][T25919] Bluetooth: hci6: command 0x041b tx timeout [ 1026.126509][T25919] Bluetooth: hci7: command 0x041b tx timeout [ 1026.348634][T25919] Bluetooth: hci8: command 0x041b tx timeout [ 1026.429083][T25919] Bluetooth: hci9: command 0x041b tx timeout [ 1026.668721][T25919] Bluetooth: hci10: command 0x041b tx timeout [ 1026.674878][T25919] Bluetooth: hci11: command 0x041b tx timeout [ 1027.948586][T25930] Bluetooth: hci6: command 0x040f tx timeout [ 1028.188633][T25930] Bluetooth: hci7: command 0x040f tx timeout [ 1028.428593][T25930] Bluetooth: hci8: command 0x040f tx timeout [ 1028.508734][T25930] Bluetooth: hci9: command 0x040f tx timeout [ 1028.748714][T25930] Bluetooth: hci11: command 0x040f tx timeout [ 1028.754880][T25930] Bluetooth: hci10: command 0x040f tx timeout [ 1030.038616][T25930] Bluetooth: hci6: command 0x0419 tx timeout [ 1030.268647][T25930] Bluetooth: hci7: command 0x0419 tx timeout [ 1030.508682][T25930] Bluetooth: hci8: command 0x0419 tx timeout [ 1030.598697][T25930] Bluetooth: hci9: command 0x0419 tx timeout [ 1030.828716][T25919] Bluetooth: hci10: command 0x0419 tx timeout [ 1030.829073][T25930] Bluetooth: hci11: command 0x0419 tx timeout [ 1054.190813][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.197149][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 1081.868639][T25919] Bluetooth: hci0: command 0x0406 tx timeout [ 1081.874701][T25919] Bluetooth: hci5: command 0x0406 tx timeout [ 1081.880834][T25930] Bluetooth: hci1: command 0x0406 tx timeout [ 1081.880903][T25929] Bluetooth: hci4: command 0x0406 tx timeout [ 1081.886829][T25930] Bluetooth: hci2: command 0x0406 tx timeout [ 1081.893151][T25929] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.773120][T25929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1082.781166][T25929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1082.792768][T25929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1082.800342][T25929] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1082.807559][T25929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1082.985835][T25919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1082.994485][T25919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1083.002584][T25919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1083.010662][T25914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1083.018779][T25914] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1083.025971][T25914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1083.378959][T25914] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1083.387511][T25914] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1083.395926][T25914] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1083.404446][T25914] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1083.412099][T25914] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1083.566929][T25919] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1083.575755][T25919] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1083.583883][T25919] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1083.591740][T25919] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1083.599328][T25919] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1083.606570][T25919] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1083.713657][T25929] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1083.729353][T25929] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1083.733811][T25930] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1083.738037][T25929] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1083.748231][T25930] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1083.752281][T25929] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1083.763431][ T5107] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1083.766855][T25930] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1083.782143][T25929] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1083.786270][T25930] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1083.791638][ T5107] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1083.796598][T25929] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1084.828631][T25930] Bluetooth: hci6: command 0x0409 tx timeout [ 1085.068685][T25930] Bluetooth: hci7: command 0x0409 tx timeout [ 1085.468676][T25930] Bluetooth: hci8: command 0x0409 tx timeout [ 1085.628759][T25930] Bluetooth: hci9: command 0x0409 tx timeout [ 1085.868645][T25930] Bluetooth: hci10: command 0x0409 tx timeout [ 1085.871409][T25919] Bluetooth: hci11: command 0x0409 tx timeout [ 1086.918595][T25919] Bluetooth: hci6: command 0x041b tx timeout [ 1087.148708][T25919] Bluetooth: hci7: command 0x041b tx timeout [ 1087.548641][T25919] Bluetooth: hci8: command 0x041b tx timeout [ 1087.708625][T25919] Bluetooth: hci9: command 0x041b tx timeout [ 1087.948662][T25919] Bluetooth: hci11: command 0x041b tx timeout [ 1087.948737][ T5107] Bluetooth: hci10: command 0x041b tx timeout [ 1088.988708][ T5107] Bluetooth: hci6: command 0x040f tx timeout [ 1089.228646][ T5107] Bluetooth: hci7: command 0x040f tx timeout [ 1089.628749][ T5107] Bluetooth: hci8: command 0x040f tx timeout [ 1089.788693][ T5107] Bluetooth: hci9: command 0x040f tx timeout [ 1090.028914][ T5107] Bluetooth: hci10: command 0x040f tx timeout [ 1090.028949][T25919] Bluetooth: hci11: command 0x040f tx timeout [ 1091.068692][T25919] Bluetooth: hci6: command 0x0419 tx timeout [ 1091.318578][T25919] Bluetooth: hci7: command 0x0419 tx timeout [ 1091.708597][T25919] Bluetooth: hci8: command 0x0419 tx timeout [ 1091.868683][T25930] Bluetooth: hci9: command 0x0419 tx timeout [ 1092.108636][T25919] Bluetooth: hci10: command 0x0419 tx timeout [ 1092.114788][T25919] Bluetooth: hci11: command 0x0419 tx timeout [ 1115.632420][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.638809][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.748721][ T28] INFO: task syz-executor.3:25912 blocked for more than 143 seconds. [ 1120.756836][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1120.764799][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1120.773531][ T28] task:syz-executor.3 state:D stack:24872 pid:25912 ppid:1 flags:0x00004004 [ 1120.782999][ T28] Call Trace: [ 1120.786308][ T28] [ 1120.789533][ T28] __schedule+0xc91/0x5770 [ 1120.794035][ T28] ? io_schedule_timeout+0x150/0x150 [ 1120.801186][ T28] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 1120.807123][ T28] schedule+0xde/0x1a0 [ 1120.811415][ T28] schedule_preempt_disabled+0x13/0x20 [ 1120.816873][ T28] rwsem_down_write_slowpath+0x3e2/0x1220 [ 1120.822917][ T28] ? down_timeout+0x90/0x90 [ 1120.827446][ T28] ? lock_release+0x670/0x670 [ 1120.832416][ T28] down_write+0x1d2/0x200 [ 1120.837125][ T28] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 1120.843445][ T28] ? nsim_drv_remove+0x11e/0x1d0 [ 1120.848471][ T28] unregister_netdevice_notifier+0x22/0x180 [ 1120.854537][ T28] devlink_free+0x2cb/0x460 [ 1120.859130][ T28] nsim_drv_remove+0x158/0x1d0 [ 1120.863926][ T28] ? nsim_num_vf+0x50/0x50 [ 1120.868513][ T28] device_remove+0xc8/0x170 [ 1120.873081][ T28] device_release_driver_internal+0x443/0x610 [ 1120.879282][ T28] ? put_device+0x1f/0x30 [ 1120.883644][ T28] bus_remove_device+0x22c/0x420 [ 1120.888665][ T28] device_del+0x48a/0xb80 [ 1120.893016][ T28] ? __device_link_del+0x380/0x380 [ 1120.898125][ T28] ? trace_contention_end+0xd8/0x100 [ 1120.903522][ T28] device_unregister+0x1e/0xc0 [ 1120.908305][ T28] del_device_store+0x34e/0x4a0 [ 1120.914718][ T28] ? nsim_bus_probe+0x20/0x20 [ 1120.919536][ T28] ? nsim_bus_probe+0x20/0x20 [ 1120.924256][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1120.929240][ T28] bus_attr_store+0x76/0xa0 [ 1120.933770][ T28] ? bus_attr_show+0x90/0x90 [ 1120.938361][ T28] sysfs_kf_write+0x114/0x170 [ 1120.943177][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1120.948534][ T28] vfs_write+0x9ed/0xe10 [ 1120.952854][ T28] ? kernel_write+0x670/0x670 [ 1120.957523][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1120.962691][ T28] ? __fget_light+0x20a/0x270 [ 1120.967448][ T28] ksys_write+0x12b/0x250 [ 1120.971810][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1120.976586][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1120.982593][ T28] do_syscall_64+0x39/0xb0 [ 1120.987057][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1120.993364][ T28] RIP: 0033:0x7fd281a3deef [ 1120.997791][ T28] RSP: 002b:00007fff2a6b1910 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1121.006300][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fd281a3deef [ 1121.014309][ T28] RDX: 0000000000000001 RSI: 00007fff2a6b1960 RDI: 0000000000000005 [ 1121.023704][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fff2a6b18b0 [ 1121.031733][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fd281ae78b6 [ 1121.039959][ T28] R13: 00007fff2a6b1960 R14: 0000000000000000 R15: 00007fff2a6b2030 [ 1121.047957][ T28] [ 1121.051054][ T28] INFO: task syz-executor.4:25916 blocked for more than 143 seconds. [ 1121.059199][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1121.066744][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.075701][ T28] task:syz-executor.4 state:D stack:24768 pid:25916 ppid:1 flags:0x00000004 [ 1121.087997][ T28] Call Trace: [ 1121.091388][ T28] [ 1121.094329][ T28] __schedule+0xc91/0x5770 [ 1121.098881][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1121.104895][ T28] ? io_schedule_timeout+0x150/0x150 [ 1121.110242][ T28] ? __mutex_lock+0xa36/0x1350 [ 1121.115033][ T28] schedule+0xde/0x1a0 [ 1121.119156][ T28] schedule_preempt_disabled+0x13/0x20 [ 1121.124630][ T28] __mutex_lock+0xa3b/0x1350 [ 1121.129443][ T28] ? del_device_store+0xc9/0x4a0 [ 1121.134421][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1121.140043][ T28] ? sscanf+0xbf/0xf0 [ 1121.144087][ T28] ? trace_contention_end+0xd8/0x100 [ 1121.149680][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.154563][ T28] del_device_store+0xc9/0x4a0 [ 1121.159423][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.164151][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.168929][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.173817][ T28] bus_attr_store+0x76/0xa0 [ 1121.178317][ T28] ? bus_attr_show+0x90/0x90 [ 1121.183221][ T28] sysfs_kf_write+0x114/0x170 [ 1121.187941][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1121.197061][ T28] vfs_write+0x9ed/0xe10 [ 1121.201476][ T28] ? kernel_write+0x670/0x670 [ 1121.206154][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1121.214858][ T28] ? up_write+0x520/0x520 [ 1121.219442][ T28] ? __fget_light+0x20a/0x270 [ 1121.224132][ T28] ksys_write+0x12b/0x250 [ 1121.228454][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1121.237404][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1121.244232][ T28] do_syscall_64+0x39/0xb0 [ 1121.252966][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.259296][ T28] RIP: 0033:0x7f4a5ec3deef [ 1121.263711][ T28] RSP: 002b:00007ffe6df4d3b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1121.275966][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4a5ec3deef [ 1121.284084][ T28] RDX: 0000000000000001 RSI: 00007ffe6df4d400 RDI: 0000000000000005 [ 1121.296130][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffe6df4d350 [ 1121.304247][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f4a5ece78b6 [ 1121.312594][ T28] R13: 00007ffe6df4d400 R14: 0000000000000000 R15: 00007ffe6df4dad0 [ 1121.320854][ T28] [ 1121.323906][ T28] INFO: task syz-executor.2:25918 blocked for more than 143 seconds. [ 1121.332309][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1121.339936][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.349310][ T28] task:syz-executor.2 state:D stack:24408 pid:25918 ppid:1 flags:0x00000004 [ 1121.358619][ T28] Call Trace: [ 1121.361912][ T28] [ 1121.364866][ T28] __schedule+0xc91/0x5770 [ 1121.369392][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1121.375446][ T28] ? io_schedule_timeout+0x150/0x150 [ 1121.380804][ T28] ? __mutex_lock+0xa36/0x1350 [ 1121.385683][ T28] schedule+0xde/0x1a0 [ 1121.390167][ T28] schedule_preempt_disabled+0x13/0x20 [ 1121.395666][ T28] __mutex_lock+0xa3b/0x1350 [ 1121.400388][ T28] ? del_device_store+0xc9/0x4a0 [ 1121.405369][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1121.410957][ T28] ? sscanf+0xbf/0xf0 [ 1121.414967][ T28] ? trace_contention_end+0xd8/0x100 [ 1121.420424][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.425305][ T28] del_device_store+0xc9/0x4a0 [ 1121.430118][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.434851][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.439592][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.444470][ T28] bus_attr_store+0x76/0xa0 [ 1121.449031][ T28] ? bus_attr_show+0x90/0x90 [ 1121.453657][ T28] sysfs_kf_write+0x114/0x170 [ 1121.458363][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1121.463983][ T28] vfs_write+0x9ed/0xe10 [ 1121.468259][ T28] ? kernel_write+0x670/0x670 [ 1121.473439][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1121.478758][ T28] ? __fget_light+0x20a/0x270 [ 1121.483481][ T28] ksys_write+0x12b/0x250 [ 1121.487803][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1121.492867][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1121.498986][ T28] do_syscall_64+0x39/0xb0 [ 1121.503450][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.509503][ T28] RIP: 0033:0x7f12bf03deef [ 1121.513942][ T28] RSP: 002b:00007ffe48e78310 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1121.522396][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f12bf03deef [ 1121.530462][ T28] RDX: 0000000000000001 RSI: 00007ffe48e78360 RDI: 0000000000000005 [ 1121.538450][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffe48e782b0 [ 1121.546484][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f12bf0e78b6 [ 1121.554494][ T28] R13: 00007ffe48e78360 R14: 0000000000000000 R15: 00007ffe48e78a30 [ 1121.562531][ T28] [ 1121.565569][ T28] INFO: task syz-executor.0:25922 blocked for more than 144 seconds. [ 1121.573854][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1121.581793][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.590657][ T28] task:syz-executor.0 state:D stack:24928 pid:25922 ppid:1 flags:0x00000004 [ 1121.600039][ T28] Call Trace: [ 1121.603315][ T28] [ 1121.606241][ T28] __schedule+0xc91/0x5770 [ 1121.610726][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1121.616765][ T28] ? io_schedule_timeout+0x150/0x150 [ 1121.622307][ T28] ? __mutex_lock+0xa36/0x1350 [ 1121.627110][ T28] schedule+0xde/0x1a0 [ 1121.636066][ T28] schedule_preempt_disabled+0x13/0x20 [ 1121.641621][ T28] __mutex_lock+0xa3b/0x1350 [ 1121.646235][ T28] ? del_device_store+0xc9/0x4a0 [ 1121.651239][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1121.656804][ T28] ? sscanf+0xbf/0xf0 [ 1121.660890][ T28] ? trace_contention_end+0xd8/0x100 [ 1121.666220][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.671128][ T28] del_device_store+0xc9/0x4a0 [ 1121.675928][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.680688][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.685418][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.690348][ T28] bus_attr_store+0x76/0xa0 [ 1121.694876][ T28] ? bus_attr_show+0x90/0x90 [ 1121.699963][ T28] sysfs_kf_write+0x114/0x170 [ 1121.705246][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1121.710946][ T28] vfs_write+0x9ed/0xe10 [ 1121.715247][ T28] ? kernel_write+0x670/0x670 [ 1121.720042][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1121.725103][ T28] ? up_write+0x520/0x520 [ 1121.731647][ T28] ? __fget_light+0x20a/0x270 [ 1121.736370][ T28] ksys_write+0x12b/0x250 [ 1121.740847][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1121.745632][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1121.751591][ T28] do_syscall_64+0x39/0xb0 [ 1121.756048][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1121.762012][ T28] RIP: 0033:0x7f1d2123deef [ 1121.766439][ T28] RSP: 002b:00007ffda7aaa5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1121.774912][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f1d2123deef [ 1121.782949][ T28] RDX: 0000000000000001 RSI: 00007ffda7aaa630 RDI: 0000000000000005 [ 1121.791105][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffda7aaa580 [ 1121.799383][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1d212e78b6 [ 1121.807380][ T28] R13: 00007ffda7aaa630 R14: 0000000000000000 R15: 00007ffda7aaad00 [ 1121.815441][ T28] [ 1121.818535][ T28] INFO: task syz-executor.1:25923 blocked for more than 144 seconds. [ 1121.826607][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1121.834198][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.844053][ T28] task:syz-executor.1 state:D stack:24840 pid:25923 ppid:1 flags:0x00000004 [ 1121.853316][ T28] Call Trace: [ 1121.856614][ T28] [ 1121.859621][ T28] __schedule+0xc91/0x5770 [ 1121.864071][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1121.870239][ T28] ? io_schedule_timeout+0x150/0x150 [ 1121.875547][ T28] ? __mutex_lock+0xa36/0x1350 [ 1121.880399][ T28] schedule+0xde/0x1a0 [ 1121.884488][ T28] schedule_preempt_disabled+0x13/0x20 [ 1121.890011][ T28] __mutex_lock+0xa3b/0x1350 [ 1121.894634][ T28] ? del_device_store+0xc9/0x4a0 [ 1121.899723][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1121.905291][ T28] ? sscanf+0xbf/0xf0 [ 1121.909339][ T28] ? trace_contention_end+0xd8/0x100 [ 1121.914666][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.919611][ T28] del_device_store+0xc9/0x4a0 [ 1121.924421][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.929225][ T28] ? nsim_bus_probe+0x20/0x20 [ 1121.933938][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1121.938880][ T28] bus_attr_store+0x76/0xa0 [ 1121.943412][ T28] ? bus_attr_show+0x90/0x90 [ 1121.948017][ T28] sysfs_kf_write+0x114/0x170 [ 1121.954911][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1121.960351][ T28] vfs_write+0x9ed/0xe10 [ 1121.964635][ T28] ? kernel_write+0x670/0x670 [ 1121.969403][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1121.974498][ T28] ? up_write+0x520/0x520 [ 1121.978925][ T28] ? __fget_light+0x20a/0x270 [ 1121.983653][ T28] ksys_write+0x12b/0x250 [ 1121.988019][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1121.992842][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1121.998848][ T28] do_syscall_64+0x39/0xb0 [ 1122.003321][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1122.009287][ T28] RIP: 0033:0x7f7b0b83deef [ 1122.013711][ T28] RSP: 002b:00007ffd3b176540 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1122.022220][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7b0b83deef [ 1122.030327][ T28] RDX: 0000000000000001 RSI: 00007ffd3b176590 RDI: 0000000000000005 [ 1122.038402][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffd3b1764e0 [ 1122.046538][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f7b0b8e78b6 [ 1122.054634][ T28] R13: 00007ffd3b176590 R14: 0000000000000000 R15: 00007ffd3b176c60 [ 1122.064796][ T28] [ 1122.067837][ T28] INFO: task syz-executor.5:25925 blocked for more than 144 seconds. [ 1122.075928][ T28] Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1122.083524][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1122.092256][ T28] task:syz-executor.5 state:D stack:25008 pid:25925 ppid:1 flags:0x00000004 [ 1122.101556][ T28] Call Trace: [ 1122.104852][ T28] [ 1122.107792][ T28] __schedule+0xc91/0x5770 [ 1122.112289][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1122.118323][ T28] ? io_schedule_timeout+0x150/0x150 [ 1122.123877][ T28] ? __mutex_lock+0xa36/0x1350 [ 1122.128710][ T28] schedule+0xde/0x1a0 [ 1122.132811][ T28] schedule_preempt_disabled+0x13/0x20 [ 1122.138286][ T28] __mutex_lock+0xa3b/0x1350 [ 1122.142988][ T28] ? del_device_store+0xc9/0x4a0 [ 1122.148139][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1122.153755][ T28] ? sscanf+0xbf/0xf0 [ 1122.157782][ T28] ? trace_contention_end+0xd8/0x100 [ 1122.163165][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1122.168044][ T28] del_device_store+0xc9/0x4a0 [ 1122.173120][ T28] ? nsim_bus_probe+0x20/0x20 [ 1122.177845][ T28] ? nsim_bus_probe+0x20/0x20 [ 1122.186265][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 1122.192516][ T28] bus_attr_store+0x76/0xa0 [ 1122.197030][ T28] ? bus_attr_show+0x90/0x90 [ 1122.205312][ T28] sysfs_kf_write+0x114/0x170 [ 1122.210156][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 1122.215452][ T28] vfs_write+0x9ed/0xe10 [ 1122.220281][ T28] ? kernel_write+0x670/0x670 [ 1122.224997][ T28] ? build_open_flags+0x6f0/0x6f0 [ 1122.230154][ T28] ? __fget_light+0x20a/0x270 [ 1122.234938][ T28] ksys_write+0x12b/0x250 [ 1122.239890][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 1122.244783][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 1122.250773][ T28] do_syscall_64+0x39/0xb0 [ 1122.255224][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1122.261233][ T28] RIP: 0033:0x7ffbb983deef [ 1122.265664][ T28] RSP: 002b:00007ffe781f3d20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1122.274170][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ffbb983deef [ 1122.282218][ T28] RDX: 0000000000000001 RSI: 00007ffe781f3d70 RDI: 0000000000000005 [ 1122.290237][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffe781f3cc0 [ 1122.298239][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffbb98e78b6 [ 1122.306292][ T28] R13: 00007ffe781f3d70 R14: 0000000000000000 R15: 00007ffe781f4440 [ 1122.314310][ T28] [ 1122.317372][ T28] [ 1122.317372][ T28] Showing all locks held in the system: [ 1122.325149][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1122.330497][ T28] #0: ffffffff8c794a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 1122.341052][ T28] 1 lock held by rcu_tasks_trace/13: [ 1122.346340][ T28] #0: ffffffff8c794770 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 1122.357863][ T28] 1 lock held by khungtaskd/28: [ 1122.367232][ T28] #0: ffffffff8c7955c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 1122.377285][ T28] 3 locks held by kworker/u4:2/41: [ 1122.386166][ T28] #0: ffff888016617138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1122.397495][ T28] #1: ffffc90000b27da8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1122.408659][ T28] #2: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb10 [ 1122.418093][ T28] 2 locks held by getty/4750: [ 1122.422892][ T28] #0: ffff88802904c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 1122.432884][ T28] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 1122.443081][ T28] 6 locks held by syz-executor.3/25912: [ 1122.448671][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.457708][ T28] #1: ffff88808b533c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.467784][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.478646][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.489177][ T28] #4: ffff88807b4150e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 1122.500671][ T28] #5: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: unregister_netdevice_notifier+0x22/0x180 [ 1122.511813][ T28] 4 locks held by syz-executor.4/25916: [ 1122.517394][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.526990][ T28] #1: ffff88808e03e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.537373][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.547580][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.558108][ T28] 4 locks held by syz-executor.2/25918: [ 1122.563820][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.573017][ T28] #1: ffff88808e39e088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.583201][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.593970][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.604578][ T28] 4 locks held by syz-executor.0/25922: [ 1122.611039][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.620238][ T28] #1: ffff88808803e888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.631000][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.641357][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.651795][ T28] 4 locks held by syz-executor.1/25923: [ 1122.657424][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.666610][ T28] #1: ffff88808ca25c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.684554][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.694834][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.705649][ T28] 4 locks held by syz-executor.5/25925: [ 1122.711433][ T28] #0: ffff88802c75c460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1122.721004][ T28] #1: ffff88808e327c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 1122.731103][ T28] #2: ffff888021d68bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 1122.741344][ T28] #3: ffffffff8d7e17a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 1122.752018][ T28] 1 lock held by syz-executor.3/27828: [ 1122.757507][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.767176][ T28] 1 lock held by syz-executor.4/27831: [ 1122.772885][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.782412][ T28] 1 lock held by syz-executor.5/27837: [ 1122.787878][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.797329][ T28] 1 lock held by syz-executor.2/27839: [ 1122.802819][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.812283][ T28] 1 lock held by syz-executor.1/27841: [ 1122.817748][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.827266][ T28] 1 lock held by syz-executor.0/27843: [ 1122.834458][ T28] #0: ffffffff8e0e2610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 1122.843996][ T28] [ 1122.846338][ T28] ============================================= [ 1122.846338][ T28] [ 1122.855046][ T28] NMI backtrace for cpu 1 [ 1122.859385][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1122.869180][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1122.879223][ T28] Call Trace: [ 1122.882489][ T28] [ 1122.885417][ T28] dump_stack_lvl+0xd9/0x150 [ 1122.890031][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 1122.894973][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 1122.900252][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 1122.906233][ T28] watchdog+0xe16/0x1090 [ 1122.910483][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1122.916453][ T28] kthread+0x2e8/0x3a0 [ 1122.920515][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1122.926147][ T28] ret_from_fork+0x1f/0x30 [ 1122.930567][ T28] [ 1122.933770][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1122.939032][ C0] NMI backtrace for cpu 0 [ 1122.939041][ C0] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1122.939061][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1122.939071][ C0] Workqueue: bat_events batadv_nc_worker [ 1122.939164][ C0] RIP: 0010:__lock_acquire+0x3f1/0x5d40 [ 1122.939186][ C0] Code: 6c 24 10 be 08 00 00 00 81 e5 ff 1f 00 00 48 89 e8 48 c1 e8 06 48 8d 3c c5 80 2b 4d 91 e8 67 b0 6f 00 48 0f a3 2d 1f e8 e8 0f <0f> 83 fc 0c 00 00 48 8d 6c 6d 00 48 c1 e5 06 48 81 c5 a0 2f 4d 91 [ 1122.939203][ C0] RSP: 0018:ffffc90001577a30 EFLAGS: 00000047 [ 1122.939216][ C0] RAX: 0000000000000001 RBX: ffffffff8c7955c0 RCX: ffffffff81644359 [ 1122.939229][ C0] RDX: fffffbfff229a571 RSI: 0000000000000008 RDI: ffffffff914d2b80 [ 1122.939241][ C0] RBP: 0000000000000021 R08: 0000000000000000 R09: ffffffff914d2b87 [ 1122.939252][ C0] R10: fffffbfff229a570 R11: 0000000000000000 R12: ffff888018c7c508 [ 1122.939264][ C0] R13: ffff888018c7ba80 R14: 0000000000020000 R15: 0000000000020021 [ 1122.939276][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1122.939294][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.939306][ C0] CR2: 000000c003deb000 CR3: 0000000029882000 CR4: 00000000003506f0 [ 1122.939318][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.939328][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1122.939339][ C0] Call Trace: [ 1122.939344][ C0] [ 1122.939354][ C0] ? __lock_acquire+0x18bc/0x5d40 [ 1122.939374][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1122.939399][ C0] lock_acquire+0x1af/0x520 [ 1122.939418][ C0] ? batadv_nc_worker+0xf7/0xfe0 [ 1122.939443][ C0] ? lock_release+0x670/0x670 [ 1122.939461][ C0] ? batadv_nc_worker+0x84a/0xfe0 [ 1122.939486][ C0] ? lock_downgrade+0x690/0x690 [ 1122.939509][ C0] batadv_nc_worker+0x131/0xfe0 [ 1122.939533][ C0] ? batadv_nc_worker+0xf7/0xfe0 [ 1122.939562][ C0] process_one_work+0x991/0x15c0 [ 1122.939588][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1122.939612][ C0] ? spin_bug+0x1c0/0x1c0 [ 1122.939632][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1122.939676][ C0] worker_thread+0x669/0x1090 [ 1122.939702][ C0] ? __kthread_parkme+0x163/0x220 [ 1122.939720][ C0] ? process_one_work+0x15c0/0x15c0 [ 1122.939744][ C0] kthread+0x2e8/0x3a0 [ 1122.939761][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 1122.939782][ C0] ret_from_fork+0x1f/0x30 [ 1122.939813][ C0] [ 1122.941589][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1123.191374][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc6-syzkaller-00127-g3037933448f6 #0 [ 1123.201199][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 1123.211523][ T28] Call Trace: [ 1123.214824][ T28] [ 1123.217759][ T28] dump_stack_lvl+0xd9/0x150 [ 1123.222379][ T28] panic+0x688/0x730 [ 1123.226296][ T28] ? panic_smp_self_stop+0x90/0x90 [ 1123.231455][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 1123.236662][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 1123.242096][ T28] ? watchdog+0xbe8/0x1090 [ 1123.246553][ T28] watchdog+0xbf9/0x1090 [ 1123.250822][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1123.256823][ T28] kthread+0x2e8/0x3a0 [ 1123.260905][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1123.266558][ T28] ret_from_fork+0x1f/0x30 [ 1123.271019][ T28] [ 1123.274186][ T28] Kernel Offset: disabled [ 1123.278514][ T28] Rebooting in 86400 seconds..